Identity Access Management Engineer

Identity & Access Management

• Design, implement, and operate IAM solutions using Microsoft Entra ID (Azure AD)
• Own identity lifecycle management, including provisioning, deprovisioning, and role-based access
• Configure and manage SSO, MFA, and Conditional Access policies to balance security and usability
• Administer identity governance, access reviews, and least-privilege access models
• Integrate identity services with enterprise and third-party applications
• Proactively monitor service health and mitigate identity-related risks and security events
• Respond to and resolve service incidents in a timely manner
• Participate in problem management and root cause analysis to improve service reliability
• Automate identity lifecycle and administrative processes using PowerShell and Microsoft Graph

Microsoft 365 Collaboration Services

• Design, implement, and operate Microsoft 365 collaboration platforms, including Exchange Online, Teams, SharePoint, and OneDrive
• Manage platform configurations, policies, and governance to enable secure and effective collaboration
• Troubleshoot and resolve service issues, minimizing business disruption
• Drive continuous improvement and adoption of best practices for collaboration experiences
• Partner with Service Desk support team to ensure consistent service delivery

Security, Compliance & Risk Management

• Enforce identity and access security controls aligned with organizational and regulatory requirements (e.g., HIPAA)
• Partner with security teams to strengthen identity posture and reduce risk
• Support audits and compliance initiatives related to identity and collaboration services

Business Alignment & Enablement

• Align identity and collaboration services with clinical, operational, and administrative workflows
• Act as a strategic partner to stakeholders, translating business needs into secure, scalable solutions
• Improve user experience while maintaining strong security and governance controls

Qualifications

• 3+ years of experience in Identity & Access Management
• Strong understanding of identity lifecycle and access governance
• Experience with SSO, MFA, and Conditional Access
• Hands-on experience with Microsoft Entra ID (Azure AD)
• Experience supporting Microsoft 365 platforms
• Strong problem-solving and communication skills

Nice to Have

• Experience in healthcare or regulated environments
• Familiarity with hybrid identity (on-prem + cloud)
• Scripting experience (PowerShell, Microsoft Graph)
• Relevant certifications (SC-300, MS-100/101, etc.)

About the Role

Pediatric Home Service is a pediatric home health agency that has provided high quality DME and nursing services to children that are medically fragile since 1990. Our services allow our clients to remain and thrive in their homes, schools, and communities. The majority of the clients we serve are age’s birth through 21 years old and have a variety of technologies that might include a trach, ventilator or g-tube. At PHS, your work directly supports the care of medically complex children. While this role is technical, the impact is very real — ensuring clinicians and teams have secure, seamless access to the tools they need every day.

Location

Roseville, MN

Hours

Monday-Friday, 8a-5p

Benefits

• Holiday Pay
• Paid Time Off
• Health and Dental insurance
• Short & Long-Term Disability and Life Insurance
• 401K with match & educational benefits

Pay

$77,000 to $95,000 annually, based on experience and qualifications

Contact Information

To apply, please visit Pediatric Home Service's website and include a cover letter and resume along with your salary requirements in your application. We look forward to learning more about you and the skills you can bring to Pediatric Home Service!