Identity and Governance Administration Engineer

Position Summary

The Identity Governance and Administration (IGA) Engineer is responsible for the implementation, operation, and ongoing support of BMCHS's identity governance controls and technologies. Working under the direction of the Director of Identity Governance & Administration, this role designs, builds, and maintains scalable IGA solutions that support secure access across the enterprise and align with information security standards, policies, and regulatory requirements.

The IGA Engineer provides technical and administrative support for identity management platforms and related services, including identity governance solutions (e.g., SailPoint, Okta, Imprivata IDG), directory services (e.g., Active Directory, Entra), privileged access management, and multi-factor authentication. This role partners closely with engineering, security, and support teams to deliver reliable identity services, troubleshoot complex issues, and continuously improve system performance and controls within BMCHS.

In addition, the IGA Engineer develops and supports Commercial Off-The-Shelf (COTS) identity solutions as well as custom data extraction and transformation pipelines to address specialized business and clinical use cases. The role documents solutions and problem resolutions, provides technical guidance and training to Help Desk and Systems Engineering teams, and participates in on-call support related to identity- and access-related security incidents.

• Work with Information Security and IT leadership to develop, implement and maintain IGA technology solutions in accordance with BMC IT Security policies.
• Engage with various stakeholders (across cybersecurity, IT and the wider BMC community) to understand IGA needs.
• Manage and maintain the configuration of IGA systems and pipelines through documentation, reporting, and coordination.
• Work directly with internal IT staff and customers to establish and enforce IGA security best practices, process improvements and effective IGA security controls—while balancing the needs of the BMC community.
• Lead the architecture, design and implementation of IGA security strategies.
• Participate in system architecture reviews and provide recommendations for securing IGA systems, processes and workflows.
• Ensure that solutions meet business objectives while establishing and maintaining a high level of users' trust and confidence in IT's knowledge of and concern for users' business needs.
• Research and educate oneself of industry best practices in IGA solutions and integrating new methods and tools.
• Continuously looking for ways to provide enhancement to existing IGA services including researching, designing, planning, scheduling, and implementing new IGA technologies into our current environment.
• Recommend security enhancements to management.
• Perform other duties as assigned or as necessary.

• Bachelor's degree in Computer Science, Engineering, or related discipline.
• 5-7 years of experience delivering, managing and maintaining IGA solutions in a complex, dynamic environment or equivalent combination of education and experience.
• Experience with a modern IGA/IAM platform (e.g., Okta, SailPoint).
• Experience developing code (e.g., Python, Power Shell) to interact with Identity / Directory systems and applications using APIs.

N/A

N/A

Technical certifications in the IGA, IAM, or security domains are a plus!

• Ability to translate complex IGA requirements into sustainable technical configurations.
• Excellent communication skills including facilitating presentations.
• Strong implementation, requirements/process analysis, conceptual and detailed design, configuration, testing.
• Excellent analytical skills and the ability to define problems, collect data, establish facts, and draw conclusions.
• The ability to express issues and communicate well with various…