Identity Developer

Company Description

Privia Health™ is a technology-driven, national physician enablement company that collaborates with medical groups, health plans, and health systems to optimize physician practices, improve patient experiences, and reward doctors for delivering high-value care in both in-person and virtual settings. The Privia Platform is led by top industry talent and exceptional physician leadership, and consists of scalable operations and end-to-end, cloud-based technology that reduces unnecessary healthcare costs, achieves better outcomes, and improves the health of patients and the well‑being of providers

Overview of the Role:
Reporting to the Director of Identity Management and Assurance, the IAM Engineer plays a critical role in the design, implementation, and continuous development of Privia’s identity platforms, with primary emphasis on our customer identity and access management (CIAM) ecosystem built on Ping One Advanced Identity Cloud (Forge Rock) and secondary emphasis on SailPoint Identity Now for workforce identity governance.

This role ensures the CIAM and IGA platforms meet Privia’s identity, security, and compliance needs. The IAM Engineer develops and maintains processes for authentication, authorization, governance, maintenance, and termination of user access for both workforce and non-workforce identities.

This position collaborates across departments to identify security gaps, optimize user lifecycle workflows, and strengthen overall identity posture. The IAM Engineer integrates the identity stack with systems such as Google Workspace, Workday, and other mission- and business-critical applications. They work with technical teams and business stakeholders to ensure identity workflows comply with security policies, industry standards, and best practices.

• Manage and perform onboarding integrations within SailPoint Identity Now, ensuring provisioning and governance across multi-tiered enterprise applications.
• Serve as the technical project manager for IGA and CIAM implementation and expansion, overseeing deployment, upgrades, and continuous improvements.
• Develop and implement identity lifecycle management automations using scripting languages and APIs to streamline access provisioning and deprovisioning.
• Provide technical leadership and mentor Junior IAM engineers and other colleagues to maintain and enhance the IGA platform, ensuring scalability and security.
• Lead the design, development, and implementation of CIAM solution, namely Ping/Forgerock, collaborating with other engineers to enhance authentication and access management for external identities.
• Create and maintain multi-tiered technical documentation for IGA/CIAM processes and integrations to ensure clarity and compliance.
• Work cross-functionally with Cybersecurity, Compliance, IT, and Enterprise Application teams to align IAM/IGA initiatives with organizational security and business goals.

• 5+ years of experience designing and building complex IAM/IGA/CIAM implementations.
• 5+ years of hands‑on experience with Ping Identity/Forge Rock in a CIAM engineering or architecture capacity.
• 3+ years of hands‑on experience with SailPoint Identity Now, including configuration and management.
• 5+ years of experience in user provisioning and lifecycle management, with a strong engineering perspective on designing and automating identity solutions.
• Experience integrating Workday with IAM, CIAM, or IGA systems, including lifecycle event automation derived from Workday data.
• Strong security skills across CIAM, IAM, and IGA domains.
• Must adhere to all HIPAA rules and regulations.
• Bachelor's Degree in Computer Science or a related field preferred.

• Experience with user provisioning in cloud environments such as Google Workspace and Google Identity; familiarity with Google Cloud Platform is preferred.
• Strong understanding of access controls, authentication, and authorization models in cloud-based platforms.
• Experience working with Workday as a source of truth, including ingesting identity attributes, supporting hire/term data flows, and integrating Workday with an IGA platform for automated lifecycle management.