Identity & Access Management; IAM) Subject Matter Expert

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.

We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

- Enforce the IAM strategy, architecture, and roadmap, aligning access controls with business needs, risk appetite, and regulatory obligations.

- Identity lifecycle and governance:
Review and advise drive joiner-mover-leaver (JML) automation, account provisioning and de-provisioning, access certification campaigns, and segregation-of-duties (SoD) reviews.

- Access control design:
Review and advise design and review role-based (RBAC) and attribute-based (ABAC) access models, least-privilege policies, and just-in-time (JIT) elevation across applications and infrastructure.

- Authentication and federation:
Review and advise architecture and operational SSO, SAML/OIDC/SCIM integrations, federation trusts, MFA policies, and conditional access rules.

- Privileged access management (PAM):
Review and advise on implementation and run vaulting, session management, credential rotation, and privileged session monitoring.

- Directory services:
Review and advise on administer and secure Active Directory, Microsoft Entra  (Azure AD), and LDAP directories, including synchronization and trust hygiene.

- Cloud IAM:
Review and advise with enforcement of least privilege on AWS, Azure, roles, policies, service accounts, workload identity, and secret management.

- Compliance and audit:
Review and advise on mapped identity controls to SOC 2, NIST, HIPPA, CMS and other frameworks;
Review and advise with preparation of evidence; respond to audit requests and remediate findings.

- Automation and integration:
Review and advise on build and maintain identity automation (Power Shell, Python, APIs), SCIM-based provisioning, and HR-as-source-of-truth integrations.

- Operations and enablement: act as subject matter expect for document standards and runbooks, deliver training, and mentor team members.

- Vendor and tooling evaluation:
Review and advise on assessing and manage identity platforms (IGA, PAM, IdP, IDB and CIAM).

- Project delivery: plan, scope, and lead IAM projects and migrations end-to-end, timelines, dependencies, stakeholder coordination, risk tracking, and rollout, from discovery through hypercare.

- 10 + years in IT / information security, with 7 + years of hands-on IAM experience

- Expert-level working knowledge of IAM protocols (SAML, OAuth 2.0 / OIDC, SCIM, LDAP, Kerberos)

- Deep hands-on experience with Active Directory and Microsoft Entra  (Azure AD)

- Proven experience running IGA programs (access certifications, SoD) and/or PAM implementations

- Experience enforcing least privilege across cloud environments (AWS, Azure)

- Strong automation capability (Power Shell or Python) and API integration experience

- Experience supporting audits and mapping identity controls to frameworks such as SOC 2, SOC 2, NIST, HIPPA, CMS

- Project management experience: leading IAM initiatives (migrations, IGA/PAM rollouts, SSO deployments) from planning through delivery, with clear timelines, dependencies, and stakeholder communication

- Degree in a relevant field, or equivalent demonstrable experience

- CISSP, CISM, or equivalent security certification

-…