RemoteLeaf Logo
Log in Sign up

Principal IAM Engineer

6 hours, 37 minutes ago
United States
Full-time
Lead
Security Engineer
DevOps and Infrastructure
GitHub HIPAA OpenID Connect PowerShell Python SAML Terraform
Apply Now
Lanterncare

Lanterncare

See how Lantern’s specialty care platform connects employees to high-quality surgical care through our Network of Excellence for surgery.

View All Jobs

Description

  • Own automated joiner, mover, and leaver provisioning and deprovisioning using RBAC/ABAC models and entitlement-inventory verification.
  • Lead Zero Trust access management, including Conditional Access, phishing-resistant MFA, least-privilege access, and just-in-time elevation.
  • Own directory services and federation across Microsoft Entra ID, SSO, SAML, OIDC, and OAuth2.
  • Govern secrets and non-human identities, including API keys, service accounts, workload identities, and their ownership registry.
  • Define key-access governance and separation of duties with the team operating the key-management system.
  • Build identity automation and identity-as-code controls using Terraform and policy-as-code.
  • Set and maintain identity-verification standards for service desk password resets, MFA resets, and device enrollment.
  • Establish identity standards and partner with Service Delivery, Cloud Engineering, HR, and GRC teams on execution and independent access attestations.
  • Create documented runbooks and resilient control-plane coverage to prevent critical dependencies on a single person.

Requirements

  • 8+ years of identity and access management experience, including principal- or staff-level ownership of an identity control plane.
  • Deep Microsoft Entra ID engineering experience, including Conditional Access, phishing-resistant MFA, SSO, and SAML, OIDC, and OAuth2 federation.
  • Experience automating identity lifecycle management across cloud, SaaS, and privileged systems using RBAC/ABAC.
  • Experience with Zero Trust identity design, least privilege, JIT access, and risk-based or adaptive controls.
  • IGA platform engineering experience, including privileged access management.
  • Automation and scripting experience with PowerShell, Python, or similar tools.
  • Identity-as-code and policy-as-code experience using Terraform and source-controlled change management such as GitHub.
  • Experience managing secrets and non-human identities, including API keys, service accounts, workload identity, and owner registries.
  • Bachelor’s degree in a relevant field or equivalent professional experience.
  • Healthcare or other regulated-environment experience; Saviynt, Azure PIM, Keeper, FIDO2/passkeys, relevant certifications, and leadership-scope growth experience are preferred.

Benefits

  • Medical, dental, and vision insurance.
  • Short- and long-term disability insurance.
  • Life insurance.
  • 401(k) with company match.
  • Flexible time off.
  • Paid parental leave.
  • Remote work arrangement.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Laminar Projects

Vigilant IT Security Manager - Portugal/Poland (Remote)

Laminar Projects 51-200 Construction & Engineering

Lead IT security and operations at Laminar Projects, a construction-technology consultancy, to strengthen cybersecurity, maintain compliance, and build a high-performing IT function.

Poland Portugal Romania Full-time Lead Security Engineer
Cybersecurity
9 hours, 22 minutes ago
N-iX

Interim Head of Information Security

N-iX 1001-5000 Internet Software & Services

N-iX is seeking an Interim Head of Information Security for a 4–6-month engagement to lead a client’s security strategy, embed secure-by-design practices, and strengthen audit readiness and resilience.

Europe Ukraine Contract Executive Security Engineer
Cybersecurity
9 hours, 37 minutes ago
FireMon.com

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that help enterprises govern network security policy across on-premises, cloud, and hybrid environments.

United States Full-time Mid Level Security Engineer
Cisco Juniper Network Security
9 hours, 37 minutes ago
CI&T

[Job - 32486] Master Cybersecurity Architect & Operations Specialist. Brazil

CI&T 5001+ Internet Software & Services

CI&T is seeking a Senior Cybersecurity Architect & Operations Specialist to lead and improve security architecture, operations, incident response, and service delivery for a US-based organization in a fully remote role.

Brazil Colombia Full-time Lead Security Engineer
Cybersecurity HIPAA Network Security
1 day, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers