We are seeking an experienced Senior Security Advisor, Identity to join our internal security team and lead our Identity and Access Management program across the enterprise. This is a high-impact, hands-on role where you will shape the strategy, drive delivery, and act as the subject matter expert across IAM, Identity Governance and Administration (IGA), and Privileged Access Management (PAM). Operating within a complex healthcare environment, you will work closely with clinical, operational, and technology stakeholders to ensure our identity controls meet both regulatory requirements and the security standards expected of a modern health organization. You will own the roadmap, lead vendor relationships, and embed robust identity practices across the business.

• Define, own, and continuously evolve the enterprise identity and access management strategy, roadmap, and target architecture
• Develop and maintain a prioritized backlog of identity initiatives, balancing risk reduction, and user experience
• Present roadmap progress, risks, and recommendations to leadership and the CISO
• Lead and participate in the design, configuration, and deployment of identity solutions using Okta and Microsoft Entra ID (Azure AD)
• Drive the implementation and optimization of IGA capabilities including access certifications, role management, and joiner/mover/leaver processes
• Oversee PAM tooling and processes, including privileged account provisioning, session management, and just-in-time access controls
• Define and enforce identity standards, policies, and patterns for adoption across engineering and operations teams
• Serve as the primary point of contact for identity platform vendors, managing contracts, escalations, and roadmap alignment
• Build strong working relationships with clinical leads, IT operations, data governance, and HR to ensure identity controls support workforce needs
• Communicate complex identity concepts in accessible terms to non-technical stakeholders across the organization

Required:

• Proven experience in a senior identity or IAM advisory role, ideally within a regulated industry
• Experience with SCIM, SAML 2.0, OAuth 2.0, and OpenID Connect protocols
• Deep hands-on expertise with Okta (Workforce Identity), including configuration, SSO, MFA, lifecycle management, and API access management
• Strong working knowledge of Microsoft Entra ID / Azure AD, including conditional access, PIM, hybrid identity, and B2B federation
• Solid understanding of IGA principles and tooling: access reviews, role-based access control (RBAC), and provisioning workflows
• Practical experience with PAM solutions and privileged account governance
• Ability to operate at both a strategic and technical level, equally comfortable writing a roadmap paper or reviewing an integration design
• Strong stakeholder engagement skills with experience influencing senior decision-makers

Preferred:

• Experience working within healthcare, or other highly regulated environments
• Familiarity with relevant frameworks and standards such as HITRUST and NIST
• Exposure to Zero Trust architecture principles and their application to identity
• Relevant certifications such as CISSP, CISM, Okta Certified Administrator, or Microsoft SC-300

Authenticity is essential to our hiring process. Submissions or interview responses created with AI are easily identified and will remove you from consideration. The same applies to using AI tools during interviews—we want to hear directly from you. We may also use technology to detect AI-generated content. Please share your genuine experiences and perspective as it’s the only way we can truly get to know you.

Total Compensation
Base pay is one element of the total compensation package. Eligible employees may also receive an annual cash bonus and have access to a comprehensive benefits offering, including medical, dental, vision, life insurance, and a 401(k) plan.

Salary Range
It is not typical for an individual to be hired at or near the top of the range. Individual pay may be influenced by factors such as skills, qualifications, experience, licensure, certifications, geographic location, and internal equity.

Applicant Privacy Notice