Lead IAM Engineer
Blue Cross Blue Shield of Massachusetts4 months ago
Boston, MA, USAStaff+
Base Salary
$164k - $200k/yr
Responsibilities
- Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
- Build integrations between IAM platforms and enterprise applications and support application onboarding.
- Create reference architectures, design patterns, authentication and authorization standards, and privileged-access practices.
- Develop IAM automation using Python, PowerShell, Terraform, APIs, and workflow engines.
- Drive Zero Trust architecture and integrate identity controls into CI/CD pipelines and DevSecOps processes.
- Secure federated identities, APIs, and non-human workload identities across AWS, Azure, and GCP environments.
- Lead troubleshooting, escalation response, root cause analysis, and remediation for complex IAM failures and outages.
- Improve platform resiliency, identify automation opportunities, and drive IAM modernization roadmaps.
- Provide technical oversight, architectural guidance, mentorship, design reviews, and code reviews for IAM engineers and administrators.
- Support audits, compliance initiatives, and risk remediation efforts while evaluating emerging IAM technologies.
Requirements
- Bachelor’s degree in Computer Science or Engineering is preferred; a high school degree or equivalent is required.
- At least 8 years of dedicated IAM engineering experience is required.
- Experience leading complex IAM initiatives across hybrid, multi-cloud, and SaaS environments.
- Expert knowledge of SAML, OAuth 2.0, and OpenID Connect.
- Advanced hands-on experience with Ping, Delinea, SailPoint, and Entra ID at enterprise scale.
- Deep expertise automating Identity Governance and Joiner-Mover-Leaver processes and deploying modern PAM controls such as credential vaulting and Just-In-Time access.
- Strong proficiency with Python, PowerShell, and Terraform.
- Relevant certifications such as CISSP, CISM, CCSP, or vendor-specific IAM certifications are strongly preferred.
- Ability to provide principal-level technical expertise, make complex architectural decisions, establish engineering standards, and mentor engineers without direct people-management responsibility.
Benefits
- Comprehensive benefits package including paid time off, medical, dental, and vision insurance.
- 401(k) and additional well-being benefits for eligible employees.
- Full-time role eligible for the Flex work persona, with candidates local to Boston or Hingham, Massachusetts preferred.
- Professional development resources and opportunities to forge an individual career path.
- Work/life-balance and wellness support.
About Blue Cross Blue Shield of Massachusetts
Blue Cross Blue Shield of Massachusetts is a nonprofit, tax-paying health insurer offering commercial, Medicare, and supplemental plans to individuals and employer groups across Massachusetts. It contracts with a broad provider network and pioneered the Alternative Quality Contract to tie payment to outcomes. Founded in 1937 and headquartered in Boston, it is an independent licensee of the Blue Cross Blue Shield Association and serves about 3 million members.