Overview
The Security Engineer - IAM role plays a crucial part in IT security, by ensuring that the right individuals have appropriate access to technology resources. They manage and maintain the IAM infrastructure, monitor user access activities, and implement policies to safeguard sensitive information. The Security Engineer - IAM collaborates with other departments to design, configure, and support secure access systems, ensuring compliance with regulatory requirements. Their role involves continuously evaluating and improving security measures to protect against unauthorized access and potential data breaches.
Responsibilities
- Design, implement, and maintain IAM solutions across on‑prem and cloud environments (AWS, Entra ID, Okta).
- Administer lifecycle provisioning/deprovisioning and access changes.
- Develop IAM policies, standards, and governance documentation.
- Configure and support MFA, SSO, and federation services (SAML, ADFS, OAuth).
- Integrate and manage privileged/service accounts through PAM platforms.
- Conduct access audits and compliance reporting (HIPAA, HITRUST).
- Automate IAM workflows using PowerShell/Python.
- Monitor IAM logs and access patterns for anomalies.
- Participate in identity-related incident response.
- Partner across IT and Cloud teams to enforce least privilege and RBAC.
- Support IAM portions of disaster recovery and business continuity.
- Complete all responsibilities as outlined in the annual performance review and/or goal setting.
- Complete all special projects and other duties as assigned.
- Must be able to perform duties with or without reasonable accommodation.
This job description is intended to describe the general nature and level of work being performed and is not to be construed as an exhaustive list of responsibilities, duties and skills required. This job description does not constitute an employment agreement and is subject to change as the needs of Cotiviti and requirements of the job change.
Qualifications
- Bachelor’s degree in technology discipline or equivalent professional experience.
- 2+ years of experience in Identity and Access Management or related security roles.
- Relevant IAM certifications preferred (CISSP, CISM, CIAM).
- Experience with AWS IAM, Entra Active Directory, Active Directory (Group Policy), and Okta.
- Strong understanding of IAM concepts, principles, frameworks, and compliance requirements.
- Expertise in federation technologies (ADFS, SAML, OAuth), SSO, and MFA.
- Experience with PAM design and service account integration (Delinea, CyberArk, BeyondTrust).
- Ability to manage IAM policies, permissions, RBAC, and least privilege.
- Proficiency in PowerShell and Python automation.
- Experience conducting access audits and compliance r