Identity & Access Management; IAM) Subject Matter Expert
Listed on 2026-11-05
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.
We also have comprehensive leadership and technical development academies to help build your skills and capabilities.
Summary
Gainwell Technologies is hiring an Identity & Access Management (IAM) Subject Matter Expert to evaluate and advise on the design, implementation, and operation of our identity and access controls across on-premises and cloud environments.
In this role, you will act as a subject matter expert on secure implementation of identity: directories, authentication and federation, single sign-on, lifecycle management, privileged access, and identity governance. You will translate business and regulatory requirements into secure, workable access policies, evaluate access certification and least-privilege programs, and support audits with clean, defensible evidence. You will also advise engineers and stakeholders as a trusted escalation point for complex identity issues and shape the long-term identity roadmap.
This is a collaborative, team‑driven expert role that partners closely with a group of security experts who influence identity strategy and security across the entire organization. Success means achieving secure, automated, and well‑governed identity.
Your role in our missionReview and advise drive joiner-mover-leaver (JML) automation, account provisioning and de-provisioning, access certification campaigns, and segregation-of-duties (SoD) reviews.
Review and advise design and review role-based (RBAC) and attribute-based (ABAC) access models, least-privilege policies, and just-in-time (JIT) elevation across applications and infrastructure.
Review and advise architecture and operational SSO, SAML/OIDC/SCIM integrations, federation trusts, MFA policies, and conditional access rules.
Review and advise on implementation and run vaulting, session management, credential rotation, and privileged session monitoring.
Review and advise on administer and secure Active Directory, Microsoft Entra (Azure AD), and LDAP directories, including synchronization and trust hygiene.
Review and advise with enforcement of least privilege on AWS, Azure, roles, policies, service accounts, workload identity, and secret management.
Review and advise on mapped identity controls to SOC 2, NIST, HIPPA, CMS and other frameworks;
Review and advise with preparation of evidence; respond to audit requests and remediate findings.
Review and advise on build and maintain identity automation (Power Shell, Python, APIs), SCIM-based provisioning, and HR-as-source-of-truth integrations.
Review and advise on assessing and manage identity platforms (IGA, PAM, IdP, IDB and CIAM).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).