Principal IAM Engineer

About the role

Lantern is the specialty care platform connecting people with the best care when they need it most. This Principal IAM Engineer is a senior level, individual-contributor role and the technical authority for identity at Lantern.

Responsibilities

• Own the identity lifecycle: joiner, mover, and leaver provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC), with deprovisioning verified against an entitlement inventory rather than assumed.
• Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default, just-in-time (JIT) elevation, and enforcement confirmed on every access path rather than only saved.
• Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2.
• Own secrets and non-human identity, including API keys, service accounts, and workload identity, and maintain an owner registry for them.
• Own key access governance and separation of duties in a model where another team operates the key management system.
• Own identity automation and identity-as-code, building lifecycle and access controls as reviewable, version-controlled infrastructure (Terraform and policy-as-code) rather than manual configuration.
• Own the identity-verification standard the service desk follows for password resets, MFA resets, and device enrollment.

Requirements

• Eight or more years in identity and access management, including principal- or staff-level ownership of an identity control plane.
• Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2, and verifying that enforcement takes effect across every access path, not only the expected one.
• Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory.
• Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls.
• Identity governance and administration (IGA) platform engineering, including privileged access management.
• Automation and scripting (PowerShell, Python, or similar) to build lifecycle workflows and custom connectors.
• Identity-as-code and policy-as-code practice, using Terraform with source-controlled change management (for example, GitHub).
• Secrets and non-human identity (API keys, service accounts, workload identity), and maintaining an owner registry for them.
• Key access governance and separation of duties in a model where another team operates the key management system.
• The ability to act as the technical authority for a function without formal people-management authority, working directly to a CISO.
• A Bachelor’s degree in a relevant field, or equivalent professional experience.

Benefits

• Medical Insurance
• Dental Insurance
• Vision Insurance
• Short & Long Term Disability
• Life Insurance
• 401k with company match
• Flexible Time Off
• Paid Parental Leave

About You

• You use LOGIC in your decision making and understand that progress is critical to making change.
• You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins.
• You have the GRIT, drive and ambition to tackle big problems.
• You care deeply for your customers are driven to keep HUMANITY in all decisions.
• You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with.
• You have integrity guiding you in life.
• You thrive in a Team Environment.

Who Thrives in This Role

• Verified enforcement.
• Automation bias.
• Structural fixes.
• Boundary clarity.
• Benefits respect.

About Lantern

Lantern is the specialty care platform, connecting people with high-quality, affordable specialty care close to home. We operate in a regulated healthcare environment (HIPAA, HITRUST, SOC 2), we handle protected health information at scale, and we are becoming an AI healthcare company, with AI adoption a top company priority.