Identity System Engineer

Overview

Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. We offer development and advancement opportunities to our nearly 50,000 Sanford Family members who are dedicated to the work of health and healing across our broad footprint.

Facility: 501 Place Bldg

Location: Fargo, ND

Address: 501 4th St N, Fargo, ND 58102, USA

Shift: 8 Hours - Day Shifts

Job Schedule: Full time

Weekly

Hours:

40.00

Salary Range: $34.50 - $57.00

Pay Info: Pay starts at $34.50 and increases according to years of applicable experience.

The Identity Systems Engineer is responsible for implementing and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Responsibilities include ensuring that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs. This role deploys and manages Active Directory services, including domain controllers, OU structures, replication health, schema extensions, and trust relationships, while ensuring alignment with business and security requirements.

The engineer oversees synchronization between AD, Entra , and other identity platforms to enable seamless hybrid identity and single sign-on for applications. Core activities include configuring and managing secure authentication methods, administering enterprise PKI and certificate life cycles, and enforcing access governance policies through Group Policy Objects and role-based models. The role also integrates systems via API calls (REST, SOAP, JSON), automates provisioning and de-provisioning workflows, and supports modern authentication protocols such as Kerberos, OAuth, OpenID Connect, and SAML.

It enforces least privilege, conducts access audits, supports compliance with SOX, HIPAA, and GDPR, and provides technical expertise during audits and governance reviews. With a technical focus complemented by operational oversight, this role ensures the organization’s identity services remain secure, resilient, and aligned with regulatory and business objectives.

This role requires technical expertise in Active Directory, Entra , authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, problem-solving skills, a security-first mindset, and least-privilege enforcement. The Identity Systems Engineer works closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.

Minimum: Bachelor’s degree required. In lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field. Minimum of 1 to 2 years of applicable work experience required, including but not limited to:

• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
• Maintaining Public Key Infrastructure (PKI)
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations
• Implementation of information security standards and procedures including HIPAA and PCI

Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.

Sanford Health offers an attractive benefits package for qualifying full-time and part-time employees. Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home-work balance. For more information about Total Rewards, visit

Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call or send an email to talent.

Sanford Health has a Drug Free Workplace Policy. An accepted offer will require a drug screen and pre-employment background screening as a condition of employment.

Req Number: R-0246584

Job Function: Information Technology

Featured: No