Identity Security Specialist at Ascension

United States

$100.218k - $139.698k

<h2>Your future role at a glance</h2> <p><strong>Location: </strong>Remote</p> <p><strong>Department: </strong>Security</p> <p><strong>Schedule: </strong>Full-Time, Days</p> <p><strong>Salary: </strong>$100,218.00 - $139,698.00 per year</p> <p>#LI-Remote</p> <h2>How you'll make an impact in this role</h2> <ul> <li>Identity Lifecycle Engineering: Architect and optimize automated end-to-end identity and identity proofing workflows, leveraging IGA tooling to eliminate manual provisioning and strengthen identity security controls across the enterprise.</li> <li>Protocol &amp; Federation Standards: Design and implement secure identity proofing and verification flows utilizing deep technical proficiency in SCIM, OAuth2, SAML 2.0, and OIDC to ensure seamless, standards-based authentication.</li> <li>Directory Orchestration &amp; L3 Support: Serve as the Tier 3 escalation authority for complex identity data synchronization and orchestration across hybrid environments, including Microsoft Active Directory, Entra ID, and Virtual Directory Services (VDS).</li> <li>Security Posture &amp; Audit Governance: Develop and execute automated technical audits and compliance monitors to validate IAM controls, ensuring continuous alignment with stringent internal policies and external regulatory requirements.</li> <li>Agile Technical Leadership: Drive IAM modernization initiatives as a Subject Matter Expert within an Agile framework, translating complex business requirements into scalable technical architectures while mentoring junior analysts.</li> </ul> <p>&nbsp;</p> <h2>What minimum qualifications you'll need</h2> <p>Education:</p> <ul> <li>High School diploma equivalency with 2 years of cumulative experience OR Associate'sdegree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required.</li> </ul> <h2>What additional requirements you'll need</h2> <ul> <li>Advanced IAM Certification: Documented expertise through CISSP, CCSP, or CISA; highly specific technical certification in SailPoint is a significant competitive advantage.</li> <li>Regulated Healthcare Expertise: Extensive experience navigating the unique security constraints and identity interdependencies of a high-volume, highly regulated healthcare ecosystem.</li> <li>Legacy-to-Modern Migration: Proven success in identifying obsolete access control processes and leading the technical migration toward modern, automated identity fabrics</li> </ul> <h2>Life at Ascension: Where purpose meets opportunity</h2> <p>Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 97,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you’ll find an inclusive and supportive environment where your contributions truly matter.</p> <h2>Equal employment opportunity employer</h2> <p> Equal employment opportunity employer </p> <p>Ascension provides Equal Employment Opportunities (EEO) to all associates and applicants for employment without regard to race, color, religion, sex/gender, sexual orientation, gender identity or expression, pregnancy, childbirth, and related medical conditions, lactation, breastfeeding, national origin, citizenship, age, disability, genetic information, veteran status, marital status, all as defined by applicable law, and any other legally protected status or characteristic in accordance with applicable federal, state and local laws. For further information, view the EEO Know Your Rights (English) poster or EEO Know Your Rights (Spanish) poster.</p> <p> Fraud prevention notice </p> <p>Prospective applicants should be vigilant against fraudulent job offers and interview requests. Scammers may use sophisticated tactics to impersonate Ascension employees. To ensure your safety, please remember: Ascension will never ask for payment or to provide banking or financial information as part of the job application or hiring process. Our legitimate email communications will always come from an @ascension.org email address; do not trust other domains, and an official offer will only be extended to candidates who have completed a job application through our authorized applicant tracking system.</p> <p> E-Verify statement </p> <p>Employer participates in the Electronic Employment Verification Program. Please click here for more information.</p> <p>&nbsp;</p> <h2>Benefits</h2> <p>Paid time off (PTO)Various health insurance options &amp; wellness plansRetirement benefits including employer match plansLong-term &amp; short-term disabilityEmployee assistance programs (EAP)Parental leave &amp; adoption assistanceTuition reimbursementWays to give back to your community</p> <p>&nbsp;</p> <p><em>Benefit options and eligibility vary by position. Compensation varies based on factors including, but not limited to, experience, skills, education, performance, location and salary range at the time of the offer.</em></p>