POS1442 - Cybersecurity Engineer - Identity Automation [Veza/ sailpoint[

• Works with the Principal Architect of Identity Governance, the Director of Cyber GRC, and the VP of Cybersecurity to define, document and present an execution plan to automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using existing platforms and dedicated cybersecurity tools.
• Identifies, designs and implements automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows in Okta, Service Now, Veza, Active Directory, Redhat IAM, and Entra AD.
• Designs automation for privileged account onboarding/offboarding in Idira (formerly CyberArk).
• With guidance from the Principal Architect of Identity Governance, works to define core RBAC models that support automation efforts.
• Educates IT leaders, peers, and application owners on industry best practices and cybersecurity standards regarding identity automation, identifies roadblocks that inhibit success, and work across the organization to educate on improvement efforts to mitigate existing functionality gaps with identities and access provisioning.
• Articulates a forward-thinking vision for identity automation and develops a supporting roadmap to implement new processes and functions.
• Aligns with NIST CSF frameworks and other regulatory requirements related to identity automation discipline.
• Ensures capabilities and focus of identity automation align with the business objectives.
• Participates in security audits and compliance initiatives related to systems access.
• Supports other security initiatives and tools as needed.

Paid Time Off: Envision offers paid time off, 9 observed holidays and paid family leave. You accrue Paid Time Off (PTO) each pay period and depending on your position and can earn a minimum of 20 days and up to 25 days per calendar year.

Okta, Auth0, Service Now, Veza, Idira, AWS IAM, Active Directory (AD), Entra AD, Redhat IAM, RBAC, ABAC, Python programming or other scripting languages (for automation/scripting functions)

• Expert knowledge of audit methodologies and standard deliverables.
• Deep expertise in IAM/PAM solutions and identity lifecycle management.
• Familiarity with modern identity and access constructs, controls, and configurations
• Strong working experience with a senior level understanding of network security, NIST CSF, and Zero Trust architecture
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Bachelor’s degree in computer science, Cybersecurity, Information Assurance, or related field.
• 4+ years’ experience in cybersecurity as a practitioner and at least 6+ years of working experience in identity related roles.
• Working experience with Okta and Service Now.
• Working experience with Identity Governance and Administration platforms like SailPoint, Savyint, Veza, etc. - Veza experience a plus
• Experience with regulatory standards such as HIPAA, PCI-DSS, NIST.
• Healthcare Cybersecurity experience a plus
• To perform this job successfully, an individual should have knowledge of:
• Working experience with Okta, Active Directory, and other identity sources and platforms.
• Ability to diagram and document using common tools (Visio, Lucid chart, Smartsheet, Word/PowerPoint)
• Working experience with scripting or automation tools (e.g., PowerShell, Python)
• CompTIA Sec+, GSEC, or similar required.
• Okta Professional / Administrator / Architect/ Developer certification(s), Service Now/Veza certification are preferred.
• CISSP or CISM are a plus.

If you are ready to join an exciting, progressive company and have a strong work ethic, join our team of experts! We offer a highly competitive salary and a comprehensive benefits package.

Company Overview: Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country.