Staff Engineer - Identity and Access Management

About the role

This role requires associates to be in-office 1-2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. The Staff Engineer - Identity and Access Management maintains enterprise information security policies, technical standards, guidelines, procedures, and other elements of an infrastructure necessary to support information security in compliance with established company policies, regulatory requirements, and generally accepted information security controls.

Responsibilities

Responsible for the delivery of strategic network security, access control and secure transaction/messaging solutions. Ensures security solutions involving the use of technologies are well-conceived, designed and implemented in compliance with enterprise standards.

• Develop the IAM framework and platform for identity-centric control pane for Agentic AI
• Develop a unified identity platform that centralizes access management, scales with enterprise demand, and simplifies governance while enabling flexibility for future evolution
• Provides first level engineering design functions and trouble resolution
• Leads or plans implementations for access management and network security technologies
• Develops testing plans to ensure quality of implementation
• Leads the investigation and reporting of data security events and incidents
• Provides system and network architecture support for information and network security technologies
• Maintains security incident response plans
• Represents major upgrades and business system replacements in change control
• Recommends changes and updates to strategy
• Leads level 1 & 2 incident recoveries
• May organize the efforts of other analysts as part of incident recovery
• Leads root cause analysis efforts

Requirements

Requires BS/BA degree in Information Technology or related field of study and a minimum of 5 years experience in systems support, system administration, system engineering, system security, access management, network security, network communications, computer networking, telecommunications, systems development and management, hardware, software, and/or data; or any combination of education and experience, which would provide an equivalent background.

Requires experience in planning and designing highly complex systems.

Skills

• Expertise in architecting complex Identity and Access Management (IAM) platforms and solutions
• Strong proficiency in Java, Spring ecosystem, and microservices architecture
• Experience leading cloud migrations (On-Prem to AWS)
• Strong experience implementing authentication protocols like OAuth, OIDC and SAML
• Deep understanding of AWS services and cloud-native architectures
• Expertise in CI/CD pipelines, DevOps practices, Docker, and Kubernetes
• Experience with event-driven architectures (RabbitMQ, Kafka, etc.)
• Strong knowledge of SQL and NoSQL databases
• Experience with infrastructure-as-code tools (Terraform, Helm)
• Familiarity with RBAC products and integrations (SailPoint, Workday)
• Experience facilitating cross-functional planning and requirements gathering
• Working knowledge of Python scripting and Unix/Linux environments
• Technical security certifications (e.g. Systems Security Certified Practitioner) strongly preferred

Benefits

We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

Pay and Schedule

Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process.