Sanford Health

Principal Identity System Engineer

Sanford Health$103K — $169K *
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in computer science or related field, or Associate's Degree with 3 years relevant experience
  • 8+ years of hands-on experience in identity and access management
  • Expertise in Active Directory, Hybrid Identities, and Entra ID
  • Proficient in implementing SSO/MFA workflows with SAML 2.0 and/or OIDC
  • Strong knowledge of Public Key Infrastructure (PKI) and access governance
  • Experience in enforcing information security standards, including HIPAA and PCI
  • One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) required

Responsibilities

  • Set the vision and drive strategies for enterprise identity platforms
  • Define and champion the IAM roadmap while establishing architectural standards
  • Collaborate with executives and security leadership to align with business objectives
  • Lead modernization efforts around Active Directory, Entra ID, PKI, and authentication services
  • Automate access governance, provisioning, and privileged access management
  • Mentor senior engineers and develop standards and playbooks
  • Monitor and enhance Key Risk Indicators (KRIs) to identify risks proactively

Benefits

  • Flexible work schedule
  • Opportunities for professional growth and development
  • Access to cutting-edge technologies
  • Collaborative work environment
  • Support for continued education and certification
Full Job Description


Work Shift:
8 Hours - Day Shifts (United States of America)
Scheduled Weekly Hours:
40
Compensation:
Salary Range: $49.50 - $81.50Pay starts at $49.50 and increases according to applicable experience.
Union Position:
No
Department Details

Summary
The Principle Identity Systems Engineer is responsible for setting strategy and designing secure enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs.

Job Description
The Principal Identity Systems Engineer is a senior technical leader responsible for setting the vision and driving enterprise-wide strategies for identity platforms across on-premises and cloud environments. This role defines and champions the IAM roadmap, establishes architectural standards for hybrid identity, Zero Trust, and cloud integrations, and collaborates closely with executives, architects, and security leadership to ensure alignment with business objectives and regulatory requirements. The Principal Identity Systems Engineer leads modernization efforts around Active Directory, Entra ID, PKI, and authentication services while evaluating emerging technologies to strengthen enterprise identity security. Core responsibilities include architecting domain and forest structures, overseeing hybrid identity synchronization, enforcing secure authentication protocols, and automating access governance, provisioning, and privileged access management. This role also monitors and enhances KRIs to proactively identify risks, conducts expert-level troubleshooting and root cause analysis, and provides guidance on audit and compliance initiatives. In addition, the Principal Identity Systems Engineer mentors senior and lead engineers, develops standards and playbooks, and represents identity services as a strategic enabler of secure, scalable business operations. Balancing deep technical execution with enterprise strategy, this position ensures the identity ecosystem is resilient, future-ready, and integral to the organization's long-term security posture.

This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security-first mindset, and least-privilege enforcement. The Principal Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Principal Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.

Qualifications
Bachelor's degree required, in lieu of education, leadership may consider an Associate's Degree plus 3 years of applicable experience in computer science or related field.

Minimum of 8 years applicable work experience required. Including but not limited to:
• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
• Maintaining Public Key Infrastructure (PKI)
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations
• Implementation of information security standards and procedures including HIPAA and PCI
• Expert knowledge of Cloud security principles

One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are required

About Sanford Health

Sanford Health is a non-profit, integrated health care system headquartered in Sioux Falls, South Dakota. It is the largest rural, not-for-profit health care system in the nation with locations in 26 states and nine countries. Sanford Health's 48,000 employees, including 1,400 physicians, make it the largest employer in the Dakotas. Sanford Health provides care to patients through a network of hospitals, clinics, long-term care facilities, and other health care services. The organization's mission is to improve the human condition through exceptional care, innovation, and discovery.
Learn more about Sanford Health
Size
1,409 employees
Industry
NASDAQ

Similar Jobs

More Jobs at Sanford Health

More Information Technology Jobs

Find similar Principal Identity System Engineer jobs: