Lead IAM Engineer
Blue Cross Blue Shield of Massachusetts2 months ago
Boston, MA, USAStaff+
Base Salary
$164k - $200k/yr
Responsibilities
- Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
- Build integrations between IAM platforms and enterprise applications and support application onboarding.
- Create reference architectures, design patterns, authentication and authorization standards, and privileged-access practices.
- Develop IAM automation using Python, PowerShell, Terraform, APIs, and workflow engines.
- Drive Zero Trust architecture and integrate identity controls into CI/CD pipelines and DevSecOps processes.
- Secure federated identities, APIs, and non-human workload identities across AWS, Azure, and GCP environments.
- Lead troubleshooting, escalation response, root cause analysis, and remediation for complex IAM failures and outages.
- Improve platform resiliency, identify automation opportunities, and drive IAM modernization roadmaps.
- Provide technical oversight, architectural guidance, mentorship, design reviews, and code reviews for IAM engineers and administrators.
- Support audits, compliance initiatives, and risk remediation efforts while evaluating emerging IAM technologies.
Requirements
- Bachelor’s degree in Computer Science or Engineering is preferred; a high school degree or equivalent is required.
- At least 8 years of dedicated IAM engineering experience is required.
- Experience leading complex IAM initiatives across hybrid, multi-cloud, and SaaS environments.
- Expert knowledge of SAML, OAuth 2.0, and OpenID Connect.
- Advanced hands-on experience with Ping, Delinea, SailPoint, and Entra ID at enterprise scale.
- Deep expertise automating Identity Governance and Joiner-Mover-Leaver processes and deploying modern PAM controls such as credential vaulting and Just-In-Time access.
- Strong proficiency with Python, PowerShell, and Terraform.
- Relevant certifications such as CISSP, CISM, CCSP, or vendor-specific IAM certifications are strongly preferred.
- Ability to provide principal-level technical expertise, make complex architectural decisions, establish engineering standards, and mentor engineers without direct people-management responsibility.
Benefits
- Comprehensive benefits package including paid time off, medical, dental, and vision insurance.
- 401(k) and additional well-being benefits for eligible employees.
- Full-time role eligible for the Flex work persona, with candidates local to Boston or Hingham, Massachusetts preferred.
- Professional development resources and opportunities to forge an individual career path.
- Work/life-balance and wellness support.