Identity and Governance Administration Engineer

POSITION SUMMARY:

The Identity Governance and Administration (IGA) Engineer is responsible for the implementation, operation, and ongoing support of BMCHS's identity governance controls and technologies. Working under the direction of the Director of Identity Governance & Administration, this role designs, builds, and maintains scalable IGA solutions that support secure access across the enterprise and align with information security standards, policies, and regulatory requirements.

The IGA Engineer provides technical and administrative support for identity management platforms and related services, including identity governance solutions (e.g., SailPoint, Okta, Imprivata IDG), directory services (e.g., Active Directory, Entra), privileged access management, and multi-factor authentication. This role partners closely with engineering, security, and support teams to deliver reliable identity services, troubleshoot complex issues, and continuously improve system performance and controls within BMCHS.

In addition, the IGA Engineer develops and supports Commercial Off-The-Shelf (COTS) identity solutions as well as custom data extraction and transformation pipelines to address specialized business and clinical use cases. The role documents solutions and problem resolutions, provides technical guidance and training to Help Desk and Systems Engineering teams, and participates in on-call support related to identity- and access-related security incidents.

Position: Identity and Governance Administration Engineer

Department: Information Security

Schedule: Full Time

ESSENTIAL RESPONSIBILITIES / DUTIES:

• Work with Information Security and IT leadership to develop, implement andmaintainIGA technology solutionsin accordance withBMC IT Security policies.
• Engage with various stakeholders (across cybersecurity,ITand the wider BMCcommunity) to understandIGAneeds.
• Manage andmaintaintheconfigurationofIGAsystems andpipelinesthrough documentation, reporting, and coordination.
• Work directly with internal IT staff and customers toestablishand enforceIGAsecurity best practices, processimprovementsand effectiveIGAsecurity controls- while balancing theneeds of the BMC community.
• Lead the architecture, design and implementation of IGAsecurity strategies.
• Participate in system architecture reviews and provide recommendations for securingIGAsystems,processesand workflows.
• Ensure that solutions meet businessobjectiveswhileestablishingand maintaininga high levelof users' trust and confidence in ITS' knowledge of and concern for users' business needs.
• Research and educate oneself of industry best practices inIGAsolutionsand integrating new methods and tools.
• Continuously looking for ways to provide enhancement to existingIGAservices including researching, designing, planning, scheduling, and implementing newIGAtechnologies into our current environment.
• Recommends security enhancements to management.
• Performs other duties as assigned or as necessary.

JOB REQUIREMENTS

REQUIRED EDUCATION AND EXPERIENCE:

Bachelor's degree in Computer Science, Engineering, or related discipline

5-7 years of experience delivering managing and maintaining IGA solutions in a complex, dynamic environment Or equivalent combination of education and experience

Experience with a modern IGA/IAM platform (e.g. Okta, SailPoint)

Experience developing code (e.g. Python, PowerShell) to interact with Identity / Directory systems and applications using APIs.

PREFERRED EDUCATION AND EXPERIENCE (If none, please enter "N/A"):

N/A

CERTIFICATIONS, LICENSES, REGISTRATIONS REQUIRED (If none, please enter "N/A"):

CERTIFICATIONS, LICENSES, REGISTRATIONS PREFERRED (If none, please enter "N/A"):

Technical certifications in the IGA, IAM, or security domains are a plus!

KNOWLEDGE, SKILLS & ABILITIES (KSAs) (If none, please enter "N/A"):

• Ability to translate complex IGA requirements into sustainable technical configurations.
• Excellentcommunicationsskills including facilitating presentations.
• Strong implementation, requirements/process analysis, conceptual and detailed design, configuration, testing.
• Excellent analytical skills and the ability to define problems, collect data,establishfacts, and draw conclusions.
• The ability to express issues and communicate well with various vendors and their operations personnel.
• Works and manages projects of moderate to advanced complexity under minimal supervision
• Ability to multitask and shift priorities when necessary

Compensation Range:

This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.

NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.

Equal Opportunity Employer/Disabled/Veterans

According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or "apps" job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.