Lead Identity System Engineer

Sanford Health

. Design, implement, and secure enterprise identity and access management infrastructure across hybrid environments .

Posted 11/10/2026full-timeUnited StatesSenior💰 $46 - $76 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and securing enterprise identity and access management infrastructures, with a strong focus on Active Directory, Entra ID, and PKI. Proven ability to lead identity projects, enforce security standards, and mentor engineering teams while ensuring compliance with industry regulations.

Highest-signal resume keywords

Active Directory ManagementEntra ID ImplementationPublic Key Infrastructure (PKI)Identity Lifecycle ManagementSecurity Certifications (CISSP, CISA, CISM)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Governance Administration (IGA)Single Sign-On (SSO)Multi-Factor Authentication (MFA)SAML 2.0OIDCAccess Governance WorkflowsTechnical IntegrationsOperational Standards DefinitionCertificate Lifecycle ManagementCompliance Reporting

Soft Skills

Problem-Solving SkillsMentoringPerformance FeedbackCollaborationLeadership

Certifications & Qualifications

CISSPCISACISMSecurity+CEH

Industry Keywords

Identity and Access ManagementHybrid EnvironmentsCompliance Standards (HIPAA, PCI)Access ReviewsAudits

About the role

Key responsibilities & impact

Design, implement, and secure enterprise identity and access management infrastructure across hybrid environments
Lead deployment, configuration, and lifecycle management of Active Directory, Entra ID, PKI, and hybrid identity services
Oversee access reviews, audits, and compliance reporting
Define operational standards, playbooks, and escalation paths
Serve as technical lead for identity projects, integrations, and cross-platform authentication initiatives
Enforce least privilege and secure sensitive systems
Manage certificate lifecycles
Automate provisioning and access governance workflows
Partner with Information Security leadership to align identity services with organizational policy
Mentor and develop engineering team members
Monitor operational KPIs to drive efficiency, resilience, and continuous improvement
Work closely with cross-functional IT, application, and security teams
Check team members’ work and provide performance feedback
Assist the team Manager with policy adherence, work prioritization, project assignments, and deadline management

Requirements

What you’ll need

Bachelor’s degree required in computer science or related field, or an Associate’s Degree plus 3 years of applicable experience in lieu of education
Minimum of 5 years applicable work experience required
Experience supporting Active Directory, Domain Services, Hybrid Identities, and Entra ID
Experience implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
Experience maintaining Public Key Infrastructure (PKI)
Experience supporting Identity Lifecycle and Access Governance workflows and technical integrations
Experience implementing information security standards and procedures including HIPAA and PCI
Deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM), and PKI
Strong problem-solving skills and a security-first mindset
Security certifications such as CISSP, CISA, CISM, Security+, or CEH are highly desired