Identity Security Engineer – Microsoft Active Directory and Entra; Remote

Discover Vanderbilt University Medical Center

Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health is committed to an environment where everyone has the chance to thrive and where your uniqueness is sought and celebrated.

It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

VEC Central Dir /Legacy Access

Manage, maintain, and support identity and authentication-related components of:

• On‑premises Microsoft Active Directory environments
• Microsoft Entra
• Federated authentication / single sign-on (SSO) services (e.g., Entra )
• Authentication services (e.g., Kerberos and RADIUS)
• Multi‑factor authentication (MFA) services (e.g., Microsoft Entra MFA, Safe Net Trusted Access (STA))
• Public key infrastructure (PKI) services (e.g., Microsoft Active Directory Certificate Services (AD CS))
• Privileged authentication management (PAM) systems (e.g., Cyber Ark)
• Work closely with other IT team members to integrate systems into VUMC’s identity environments. Conduct duties under occasional guidance.

• Responsible for the ongoing operational support of VUMC identity solutions and related applications.
• Document current and proposed environments.
• Maintain processes, procedures, and documentation around all core processes that interact with identity systems.
• Assist in onboarding new applications utilizing SSO.

• Solid experience with directory services like Microsoft Active Directory and Entra  (required).
• Bachelor's degree or two years relevant experience with identity systems support.
• Identity‑related experience in Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments is a plus.

Authentication/Authorization (Intermediate): Demonstrates mastery of Authentication and Authorization Services in practical applications of a difficult nature. Knowledgeable of several authentication methods such as NTLM, Kerberos, SAML and OpenID Connect. Participates in the design of the Company’s authorization service.

Security Architecture (Novice): Familiar with foundational concepts of security architecture and related tools and utilities. Has a solid understanding of security that supports a major application, computer system or other component of the organization’s corporate architecture. Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems.

Server Security (Novice): Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems. Able to explain and document the functionality of security requirements and how they relate to the business and an information security program.

Experience Level: 2 years

Education: Bachelor's (Required)

Vanderbilt Health is committed to fostering an environment where everyone has the chance to thrive and is committed to the principles of equal opportunity. EOE/Vets/Disabled.