Identity Access Management Engineer

We're looking for an IAM Engineer to join our Digital Infrastructure & Operations team. In this role, you'll own identity and access management while supporting Microsoft 365 collaboration tools for over 2,000 users.

This is a great opportunity for someone who enjoys balancing security with user experience, improving systems, and partnering across teams to deliver scalable solutions.

Identity & Access Management (Primary Domain)

• Design, implement, and operate IAM solutions using Microsoft Entra ID (Azure AD)
• Own identity lifecycle management, including provisioning, deprovisioning, and role-based access
• Configure and manage SSO, MFA, and Conditional Access policies to balance security and usability
• Administer identity governance, access reviews, and least-privilege access models
• Integrate identity services with enterprise and third-party applications
• Proactively monitor service health and mitigate identity-related risks and security events
• Respond to and resolve service incidents in a timely manner
• Participate in problem management and root cause analysis to improve service reliability
• Automate identity lifecycle and administrative processes using PowerShell and Microsoft Graph

Microsoft 365 Collaboration Services (Secondary Domain)

• Design, implement, and operate Microsoft 365 collaboration platforms, including Exchange Online, Teams, SharePoint, and OneDrive
• Manage platform configurations, policies, and governance to enable secure and effective collaboration
• Ensure availability and performance of collaboration tools
• Troubleshoot and resolve service issues, minimizing business disruption
• Drive continuous improvement and adoption of best practices for collaboration experiences
• Partner with Service Desk support team to ensure consistent service delivery

Security, Compliance & Risk Management

• Enforce identity and access security controls aligned with organizational and regulatory requirements (e.g., HIPAA)
• Partner with security teams to strengthen identity posture and reduce risk
• Support audits and compliance initiatives related to identity and collaboration services

Business Alignment & Enablement

• Align identity and collaboration services with clinical, operational, and administrative workflows
• Act as a strategic partner to stakeholders, translating business needs into secure, scalable solutions
• Improve user experience while maintaining strong security and governance controls

Do you have experience in Communication skills?, What You Bring

• 3+ years of experience in Identity & Access Management
• Strong understanding of identity lifecycle and access governance
• Experience with SSO, MFA, and Conditional Access
• Hands-on experience with Microsoft Entra ID (Azure AD)
• Experience supporting Microsoft 365 platforms
• Strong problem-solving and communication skills

Nice to Have

• Experience in healthcare or regulated environments
• Familiarity with hybrid identity (on-prem + cloud)
• Scripting experience (PowerShell, Microsoft Graph)
• Relevant certifications (SC-300, MS-100/101, etc.)

2800 Cleveland Avenue North, Roseville, MN 55113 Hybrid work $77,000 - $95,000 a year - Full-time, Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Dental insurance
• Life insurance
• Disability insurance
• Paid holidays, At PHS, we are committed to providing specialized care for medically complex children. Every role, from direct patient care to customer support, plays a vital part in improving the lives of kids and families. The impact you make is invaluable. We are dedicated to offering fair and transparent compensation to our team members. The range for this role is $77,000 to $95,000 annually, based on experience and qualifications., * Holiday Pay
• Paid Time Off
• Health and Dental insurance
• Short & Long-Term Disability and Life Insurance
• 401K with match & educational benefits

Pediatric Home Service is a pediatric home health agency that has provided high quality DME and nursing services to children that are medically fragile since 1990. Our services allow our clients to remain and thrive in their homes, schools, and communities. The majority of the clients we serve are age's birth through 21 years old and have a variety of technologies that might include a trach, ventilator or g-tube. At PHS, your work directly supports the care of medically complex children. While this role is technical, the impact is very real - ensuring clinicians and teams have secure, seamless access to the tools they need every day. You'll be part of a collaborative team that values innovation, reliability, and continuous improvement.