Sr Engineer — Identity and Access Management

Job Description

Your Future Evolves Here

Evolent Health has a bold mission to change the health of the nation by changing the way health care is delivered. Our pursuit of this mission is the driving force that brings us to work each day. We believe in embracing new ideas, challenging ourselves and failing forward. We respect and celebrate individual talents and team wins. We have fun while working hard and Evolenteers often make a difference working in everything from scrubs to jeans.

Are we growing Absolutely and Globally. In 2021 we grew our teams by almost 50% and continue to grow even more in 2022. Are we recognized as a company you are supported by for your career and growth, and a great place to work Definitely. Evolent Health International (Pune, India) has been certified as Great Places to Work in 2021. In 2020 and 2021 Evolent in the U.S. was both named Best Company for Women to Advance list by Parity.org and earned a perfect score on the Human Rights Campaign (HRC) Foundations Corporate Equality Index (CEI). This index is the nation&aposs foremost benchmarking survey and report measuring corporate policies and practices related to LGBTQ+ workplace equality.

We recognize employees that live our values, give back to our communities each year, and are champions for bringing our whole selves to work each day. If youre looking for a place where your work can be personally and professionally rewarding, dont just join a company with a mission. Join a mission with a company behind it.

What Youll Be Doing:

What Youll Be Doing:

As a Sr. IAM Engineer, you will report to the Associate Director of within the IT function and play a critical role in designing, implementing, and maintaining secure identity and access management solutions across our digital ecosystem. You will lead initiatives in Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization (AuthN/AuthZ), Multi-Factor Authentication (MFA), Identity Governance, and Customer Identity and Access Management (CIAM).

Key Responsibilities

Privileged Access Management (PAM)

- Design and implement PAM solutions ensuring secure, resilient, and user-friendly access to critical systems.
- Integrate PAM tools with enterprise IT and security systems.
- Define and enforce policies for privileged account usage, session monitoring, and credential vaulting.

Identity Lifecycle Management

- Manage the full lifecycle of identities (human and machine) across hybrid and multi-cloud environments.
- Automate provisioning, de-provisioning, and access reviews based on role and responsibility changes.
- Ensure accurate entitlement mapping and access certification.

Authentication & Authorization (AuthN/AuthZ)

- Implement secure authentication mechanisms including MFA, adaptive access, and risk-based policies.
- Define and enforce RBAC and ABAC models to control access to enterprise resources.
- Integrate modern identity protocols such as SAML, OAuth 2.0, OpenID Connect, and SCIM.

Customer Identity and Access Management (CIAM)

- Design and implement CIAM strategies to support secure, seamless digital experiences for external users.
- Integrate identity verification, consent management, and privacy controls into customer-facing applications.

Requirements

- Bachelors degree in computer science, Information Systems, Cybersecurity, or related field.
- 5+ years of hands-on experience in Privileged Access Management.
- 5+ years of IT administration or equivalent experience.
- Advanced knowledge of identity technologies, Active Directory, SSO, and Federated Identities.

Mandatory Requirements:

Employees must have a high-speed broadband internet connection with a minimum speed of 50 Mbps and the ability to set up a wired connection to their home network to ensure effective remote work. These requirements may be updated as needed by the business.

Evolent Health is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status.

---