Position Summary: 

The Supervisor, Identity and Access Management (IAM), is responsible for providing technical expertise and leadership in the analysis, development, and implementation of IAM applications and solutions. This role offers in-depth technical consultation to business units and IT management, ensuring that IAM strategies align with organizational needs and industry best practices.  The supervisor collaborates with stakeholders to develop and refine plans, processes, and integrations that address information security requirements while optimizing user access and operational efficiency. This position also oversees the daily activities of the IAM team, fostering a culture of accountability, continuous improvement, and collaboration.  Embodies Memorial Health Performance Excellence Standards of Safety, Quality, Integrity and Stewardship that support our mission, vision and values.

Education:

Bachelor’s degree in computer science, information systems, cybersecurity or a related field. 

Licensure/Certification/Registry:

• Cyber Security Certification preferred
• OKTA Certified Professional
• SailPoint IdentityNow Certification (Azure Entra ID, Okta, Sailpoint, Saviynt, CyberArc, BeyondTrust.)
• CISSP, CISM, or equivalent certification preferred

Experience:

• Technical: knowledge of relevant IT infrastructure and security concepts (system administration, networking, operating systems, and security protocols).  Experience in computer science or related field is essential.
• IAM Concepts: must be familiar with IAM principles (such as authentication, authorization, provisioning, de-provisioning, role-based access control (RBAC), and least privilege access).
• Architecture: Hands-on experience with developing/architecting solutions using two or more leading IAM Solution providers such as Azure Entra ID, Okta, Sailpoint, Saviynt, CyberArc, BeyondTrust
• Script Writing: Familiarity with scripting languages, such as PowerShell and Python, to automate IAM tasks.
• Excellent knowledge of MFA, risk based and adaptive access control and protocols such as OpenID Connect, SAML, OAuth 2.0 and SCIM
• Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance
• Five years of experience in technology implementation, including three years in developing, implementing, and architecting information systems and three years technical architecture experience integrating identity management, access management and access governance software into client’s infrastructure and applications.
• Familiarity in one of more of the following areas:  Identity management, PAM, SSO and MFA. 

Other Knowledge/Skills/Abilities:

• Strong oral and written communication skills
• Strong analytical skills to consume/parse data and translate it into meaningful information for senior leaders
• Can deliver under tight deadlines
• Able to navigate a demanding and high-pressure environment
• Ability to think strategically and incorporate business needs into technical roadmaps
• Strong problem solving and trouble shooting skills
• Can manage projects and execute on those objectives
• Familiarity with scripting languages, such as PowerShell and Python, to automate IAM tasks

Principal Duties & Responsibilities: 

1. Embodies the Memorial Health System Performance Excellence Standards of Safety, Quality, Integrity and Stewardship that support our mission, vision and values:

• SAFETY: Prevent Harm - I will put safety first in everything I do.  I will speak up, without fear, on matters of patient and colleague safety.  I will take action to create an environment of zero harm.

• QUALITY: Improve Outcomes -  I will continually advance my knowledge and skills.  I will seek out continuous improvement opportunities.  I will deliver evidence-based care that leads to excellence in outcomes.

• INTEGRITY: Show respect and Compassion  - I will respect others and show compassion.  I will behave honesty and ethically.  I will be accountable for my attitude, actions and health.

• STEWARDSHIP: Reduce Waste - I will use resources wisely and maintain financial stability.  I will work together to coordinate care and services across the health system.  I will promote healthier communities.

2. Facilitates the use of technology-based tools or methodologies to review, design and/or implement products and services to provide a strong IAM program that balances access with compliance and confidentiality and business requirements.
3. Identities and evaluates complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control requirements.
4. Analyzes the broader impact of current decisions related to user access, data access and information security.
5. Acts as subject matter expert on all IAM disciplines including identity governance and administration, (IGA), Access Management, (SSO, MFA), privileged access management and identify verification, (ID Proofing, etc.)
6. Provides status reporting to include accomplishments, plans for upcoming activities and overall completion status on a regular basis ensuring all milestones and deliverables are achieved within communicated deadlines.
7. Aligns IAM processes across the organization and develops and document standards for organization use. Evaluates existing and emerging technologies and tools in IAM services.
8. Understands business and information technology management processes and demonstrates advanced understanding of business processes, identity-first security, internal control risk management, IT controls and related standards.
9. Fosters an understanding of the need for and application of IAM system, and supports decision-making with appropriate business users
10. Ensure systems comply with relevant security standards and regulations, such as PCI DSS, HIPAA,.
11. Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance
12. Work with IT architects and engineers to design and connect APIs, services and applications to IAM systems.
13. Provide training to IT staff and business users on IAM policies and procedures.
14. Troubleshoot IAM-related issues and support users with access problems.
15. Performs other related work as required or requested.