Senior Identity System Engineer
Sanford Health
Summary
The Senior Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs.
Job description
Summary
The Senior Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs.
Job Description
The Senior Identity Systems Engineer is an advanced technical role responsible for designing, implementing, and optimizing enterprise identity infrastructure across on-premises and cloud environments. This position leads the architecture of domain topologies, forest structures, and global replication, while ensuring hybrid identity solutions provide seamless sign-in experiences across platforms.
The engineer drives the adoption of modern authentication protocols such as Kerberos, OAuth, OpenID Connect, and SAML, and leads initiatives around just-in-time access, privileged session monitoring, and automated access governance.
- Integrating systems through API calls (REST, SOAP, JSON)
- Managing enterprise PKI and certificate lifecycles
- Enforcing security baselines via Group Policy
- Ensuring compliance with regulatory frameworks such as SOX, HIPAA, and GDPR
In addition to technical execution, the Senior Identity Systems Engineer plays a mentoring role, guiding junior engineers in best practices and fostering team knowledge growth. With a focus on innovation and automation, this role ensures that the organization's identity services remain secure, resilient, and aligned with modern zero trust principles and evolving business needs.
This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security-first mindset, and least-privilege enforcement. The Senior Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data.
The Senior Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.
Qualifications
Bachelor's degree required, in lieu of education, leadership may consider an Associate's Degree plus 3 years of applicable experience in computer science or related field.
Minimum of 3-4 years applicable work experience required. Including but not limited to:
- Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID
- Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
- Maintaining Public Key Infrastructure (PKI)
- Supporting Identity Lifecycle & Access Governance workflows and technical integrations
- Implementation of information security standards and procedures including HIPAA and PCI
Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.
Requirements
- Bachelor's degree required, or Associate's Degree plus 3 years of applicable experience in computer science or related field
- Minimum of 3-4 years applicable work experience
- Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID
- Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
- Maintaining Public Key Infrastructure (PKI)
- Supporting Identity Lifecycle & Access Governance workflows and technical integrations
- Implementation of information security standards and procedures including HIPAA and PCI
- Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) highly desired
Benefits
- 401(k)
- Medical, Dental & Vision
- Paid Time Off
Company overview
Sanford Health is one of the largest integrated healthcare delivery systems in the United States, operating as a nonprofit organization headquartered in Sioux Falls, South Dakota. Founded in 1894, the organization has grown into a comprehensive health system with 44 medical centers, 482 clinics, and more than 200 senior living facilities across 26 states and nine countries. Sanford Health provides a full spectrum of healthcare services including acute care hospitals, specialty clinics, senior care through the Good Samaritan Society, genomic medicine, global clinics, and the Sanford Health Plan insurance program. The system employs over 48,000 healthcare professionals including 1,400 physicians and delivers care through five Centers of Excellence: Cancer, Children's, Heart, Orthopedics/Sports Medicine, and Women's Health. Annually, Sanford Health handles approximately 5.3 million outpatient visits, 84,000 admissions, and 136,000 surgeries. The organization is also actively involved in medical research and education through partnerships with academic institutions, positioning itself as a regional healthcare leader in the Midwest with expanding international presence.