Senior Identity System Engineer

Job Summary

The Senior Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments.

Responsibilities

• Designing, implementing, and optimizing enterprise identity infrastructure across on-premises and cloud environments.
• Led the architecture of domain topologies, forest structures, and global replication, while ensuring hybrid identity solutions provide seamless sign-in experiences across platforms.
• Driving the adoption of modern authentication protocols such as Kerberos, OAuth, OpenID Connect, and SAML, and leading initiatives around just-in-time access, privileged session monitoring, and automated access governance.
• Integrating systems through API calls (REST, SOAP, JSON), managing enterprise PKI and certificate lifecycles, enforcing security baselines via Group Policy, and ensuring compliance with regulatory frameworks such as SOX, HIPAA, and GDPR.
• Mentoring junior engineers in best practices and fostering team knowledge growth.
• Ensuring the organization's identity services remain secure, resilient, and aligned with modern zero trust principles and evolving business needs.

Qualifications

• Bachelor’s degree required, in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.
• Minimum of 3-4 years applicable work experience required. Including but not limited to: Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
• Maintaining Public Key Infrastructure (PKI)
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations
• Implementation of information security standards and procedures including HIPAA and PCI Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.

Benefits

Sanford offers an attractive benefits package for qualifying full-time and part-time employees. Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home-work balance.

Company Details

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. Facility: Sanford Bemidji Peak Ctr Location: Bemidji, MN Address: 2017 Net Way NW, Bemidji, MN 56601, USA Shift: 8 Hours - Day Shifts Job Schedule: Full time Weekly Hours: 40.00 Salary Range: $40.00 - $66.00 Pay Info: Pay starts at $40 and increases according to years of applicable experience. Department Details Experience Highly Preferred Saviynt and Java programming Experience Also Preferred SQL REST/SOAP API call experience

Company Information

Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-673-0854 or send an email to talent@sanfordhealth.org . Sanford has a Drug Free Workplace Policy. An accepted offer will require a drug screen and pre-employment background screening as a condition of employment. Req Number: R-0262331 Job Function: Information Technology Featured: No