Principal IAM Engineer
Employerdirect Health Care · Dallas, TX - Hybrid (3x in office/week)
About this role
**Principal IAM Engineer** at Lantern **About the Role** Senior individual-contributor position as the technical authority for identity at Lantern. Own the identity control plane end-to-end, determining who can access PHI and under what conditions. Reports to CISO with a clear path to expand into leadership. **Key Responsibilities** • Identity lifecycle: automated joiner, mover, leaver provisioning/deprovisioning (RBAC/ABAC) • Access management: Conditional Access, phishing-resistant MFA, Zero Trust, JIT elevation • Directory & federation: Entra ID, SSO, SAML, OIDC, OAuth2 • Secrets & non-human identity: API keys, service accounts, workload identity with owner registry • Key access governance and separation of duties • Identity-as-code: Terraform and policy-as-code infrastructure • Identity verification standards for password/MFA resets and device enrollment **First Year Deliverables** • Conditional Access enforced on PHI-facing applications • Automated provisioning/deprovisioning meeting SLA • Secrets golden path with vaulted secrets and key-to-owner registry • Phishing-resistant MFA on privileged accounts • Documented runbooks eliminating single points of failure **Requirements** • 8+ years IAM experience with principal/staff-level control plane ownership • Deep Microsoft Entra ID engineering expertise • Identity lifecycle automation across cloud, SaaS, privileged systems • Zero Trust design and IGA platform engineering • Automation/scripting (PowerShell, Python) and identity-as-code • Secrets and non-human identity management • Bachelor's degree or equivalent professional experience **Strong Candidates Have** • Healthcare or regulated environment experience • Hands-on Saviynt, Azure PIM, Keeper experience • Passkeys/FIDO2 or phishing-resistant authenticator experience • Microsoft Identity and Access Administrator certification or equivalent **Location:** Hybrid - 3+ days/week in Dallas, TX **Benefits:** Medical, dental, vision, disability, life insurance, 401k match, flexible PTO, paid parental leave
Listing freshness
CronJobs last confirmed this listing 10h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.