Identity and Governance Administration Engineer

POSITION SUMMARY :

The Identity Governance and Administration (IGA) Engineer is responsible for the implementation, operation, and ongoing support of BMCHS’s identity governance controls and technologies. Working under the direction of the Director of Identity Governance & Administration, this role designs, builds, and maintains scalable IGA solutions that support secure access across the enterprise and align with information security standards, policies, and regulatory requirements.

The IGA Engineer provides technical and administrative support for identity management platforms and related services, including identity governance solutions (e.g., SailPoint, Okta, Imprivata IDG), directory services (e.g., Active Directory, Entra), privileged access management, and multi-factor authentication. This role partners closely with engineering, security, and support teams to deliver reliable identity services, troubleshoot complex issues, and continuously improve system performance and controls within BMCHS.

In addition, the IGA Engineer develops and supports Commercial Off-The-Shelf (COTS) identity solutions as well as custom data extraction and transformation pipelines to address specialized business and clinical use cases. The role documents solutions and problem resolutions, provides technical guidance and training to Help Desk and Systems Engineering teams, and participates in on-call support related to identity- and access-related security incidents.

Position: Identity and Governance Administration Engineer

Department: Information Security

Schedule: Full Time

ESSENTIAL RESPONSIBILITIES / DUTIES:

• Work with Information Security and IT leadership to develop, implement and maintain IGA technology solutions in accordance with BMC IT Security policies.
• Engage with various stakeholders (across cybersecurity, IT and the wider BMC community) to understand IGA needs.
• Manage and maintain the configuration of IGA systems and pipelines through documentation, reporting, and coordination.
• Work directly with internal IT staff and customers to establish and enforce IGA security best practices, process improvements and effective IGA security controls – while balancing the needs of the BMC community.
• Lead the architecture, design and implementation of IGA security strategies.
• Participate in system architecture reviews and provide recommendations for securing IGA systems, processes and workflows.
• Ensure that solutions meet business objectives while establishing and maintaining a high level of users’ trust and confidence in ITS’ knowledge of and concern for users’ business needs.
• Research and educate oneself of industry best practices in IGA solutions and integrating new methods and tools.
• Continuously looking for ways to provide enhancement to existing IGA services including researching, designing, planning, scheduling, and implementing new IGA technologies into our current environment.
• Recommends security enhancements to management.
• Performs other duties as assigned or as necessary.

JOB REQUIREMENTS

REQUIRED EDUCATION AND EXPERIENCE:

Bachelor’s degree in Computer Science, Engineering, or related discipline

5-7 years of experience delivering managing and maintaining IGA solutions in a complex, dynamic environment Or equivalent combination of education and experience

Experience with a modern IGA/IAM platform (e.g. Okta, SailPoint)

Experience developing code (e.g. Python, PowerShell) to interact with Identity / Directory systems and applications using APIs.

PREFERRED EDUCATION AND EXPERIENCE (If none, please enter “N/A”):

N/A

CERTIFICATIONS, LICENSES, REGISTRATIONS REQUIRED (If none, please enter “N/A”):

CERTIFICATIONS, LICENSES, REGISTRATIONS PREFERRED (If none, please enter “N/A”):

Technical certifications in the IGA, IAM, or security domains are a plus!

KNOWLEDGE, SKILLS & ABILITIES (KSAs) (If none, please enter “N/A”):

• Ability to translate complex IGA requirements into sustainable technical configurations.
• Excellent communications skills including facilitating presentations.
• Strong implementation, requirements/process analysis, conceptual and detailed design, configuration, testing.
• Excellent analytical skills and the ability to define problems, collect data, establish facts, and draw conclusions.
• The ability to express issues and communicate well with various vendors and their operations personnel.
• Works and manages projects of moderate to advanced complexity under minimal supervision
• Ability to multitask and shift priorities when necessary

Compensation Range:

This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.

NOTE : This range is based on Boston-area data, and is subject to modification based on geographic location.

Equal Opportunity Employer/Disabled/Veterans

According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.