Identity Security Engineer

About the role

MyEyeDr. is seeking a dynamic and detail-oriented Identity Security Engineer to join our IT Cyber Security team. The Identity Security Engineer helps architect, deploy, and operate secure identity and cloud infrastructure that aligns with business needs. This position is responsible for supporting operational innovation while providing security direction to the business to elevate the company's security posture across identity systems, cloud platforms, and enterprise applications. Reporting to the VP, Cyber Security & IT Operations.

Responsibilities

• Design, implement, and maintain enterprise identity and access management (IAM) controls across cloud and hybrid environments, ensuring secure access to systems, applications, and data.
• Manage the complete identity lifecycle for workforce, contractor, service, and privileged accounts, including provisioning, role changes, access requests, and deprovisioning activities.
• Engineer and support Single Sign-On (SSO), Multifactor Authentication (MFA), Conditional Access, federation services, and Zero Trust access controls utilizing Microsoft Entra ID and related identity platforms.
• Govern role-based access control (RBAC), entitlement management, privileged access, and periodic access reviews to ensure least-privilege principles are consistently enforced across the enterprise.
• Develop and automate identity governance processes, application integrations, and access workflows using standards such as SAML, OAuth, OpenID Connect, SCIM, APIs, PowerShell, and Python.
• Develop and maintain secure, resilient enterprise-grade cloud processes in tandem with architects and system engineers.
• Secure business applications and computing environments across public, private or hybrid cloud infrastructures.
• Protect patient data and business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies.
• Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts.