Engineer, Identity and Access Management

Company Navitus About Us Navitus - Putting People First in Pharmacy - Navitus was founded as an alternative to traditional pharmacy benefit manager (PBM) models. We are committed to removing cost from the drug supply chain to make medications more affordable for the people who need them. At Navitus, our team members work in an environment that celebrates diversity, fosters creativity and encourages growth. We welcome new ideas and share a passion for excellent service to our customers and each other._____________________________________________________________________________________________________________________________________________________________________________________________________________. Current associates must use SSO login option at to be considered for internal opportunities. Pay Range USD $105,271.00 - USD $131,588.00 /Yr. STAR Bonus % (At Risk Maximum) 5.00 - Salaried Non-Management except pharmacists Work Schedule Description (e.g. M-F 8am to 5pm) M-F 8am to 5pm Remote Work Notification ATTENTION: Navitus is unable to offer remote work to residents of Alaska, Hawaii, Maine, Mississippi, New Hampshire, New Mexico, North Dakota, Rhode Island, South Carolina, South Dakota, West Virginia, and Wyoming. Overview Navitus Health Solutions is seeking an Identity and Access Management Engineer to join our team! The Identity and Access Management (IAM) Engineer will be responsible for developing processes for account creation, modification, disabling and deleting accounts. This would include OKTA Directory, Active Directory, O365 and other downstream systems. The Engineer will work closely with application owners to develop processes to manage the entire user account lifecycle to include SSO (SAML) configurations, User Entitlement Review as well as meet audit and compliance requirements. The Identity and Access Management unit is responsible for provisioning support which includes ticket management, customer support, and knowledge of least privilege methodology with security rights, permissions and groups, experience with OKTA, Active Directory, O365, ADFS and Multifactor platforms. Due to the importance of this position, it is expected that a person supporting IAM has basic troubleshooting skills with networking and computer systems, can multitask, work in a fast-paced environment while providing excellent customer service. In addition to the primary role of IAM Engineer this position will also perform general security Engineer duties. Is this you? Find out more below! Responsibilities How do I make an impact on my team? • Design, implement, monitor and evaluate IAM security controls that protect systems and data via least privilege access model • Configuring OKTA SSO Federations and support troubleshooting of OKTA environments. Working with our customer’s IT team to configure SSO SAML Injection for seamless passing of customer Idp authentication and authorization • Build and configure OKTA tenants for project teams • Ensure OKTA is synchronized with our ADFS structure • Triage and troubleshoot issue with OKTA performance. Perform health-check on the platform, working with our 3rd party support teams • Participate in the development and maintenance of the IAM workflows that manage the provisioning of entitlements to end users • Assist in investigations of IAM security incidents as well as document security breaches to determine extent of exposure or damage • Install and manage IAM software designed to protect systems and information infrastructure • Maintain IAM Awareness Training platform • Assist in developing corporate IAM strategies, including deployment, administration, configuration and support of IAM related systems, policies and procedures • Develop increased breadth and depth of the organization’s monitoring resources, documenting and maintaining a framework to consistently assess the organization’s IAM security posture • Other duties as assigned Qualifications What our team expects from you? • Bachelor’s degree required. or 4+ years equivalent work experience (ex. IAM, System Admin, Cybersecurity Engineer) • 2-5 years' experience in Identity and Access Management or related area • OKTA Administrator/Architecture understanding • Relevant certifications: CompTIA Network+, Security+, or CySA+, GIAC GSec, Associate of (ISC)², CAMS, CIMP or equivalent • Bachelor’s degree in the field of Computer Science with a focus on Cyber Security preferred • Relevant certification preferred: (ISC)² CISSP, ISACA CISM, CAMS, CIMP or equivalent • Experience with Active Directory and ADFS • Experience provisioning for Office 365 and Azure a plus • Experience with multifactor and SSO platforms (OKTA) • Demonstrated experience performing control evaluations within an intricate environment • Ability to perform analysis of data, processes, policies, procedures and/or systems • Familiarity of regulatory requirements (i.e., PCI, HIPAA, GLBA, SOC) and frameworks (e.g., NIST, ISO 27002 etc.) • Knowledge of "best practice" security frameworks (NIST Cyber Security Framework, NIST SP 800-53, CIS CSC, and HITRUST Security Framework) are preferred • Experience working in a Regulated Industries preferred. Familiarity with healthcare regulatory (HIPAA, HITECH, PCI) environments is a plus • Experience working with Agile Scrum & Kanban project management teams • Participate in, adhere to, and support compliance program objectives • The ability to consistently interact cooperatively and respectfully with other employees What can you expect from Navitus? • Top of the industry benefits for Health, Dental, and Vision insurance • 20 days paid time off • 4 weeks paid parental leave • 9 paid holidays • 401K company match of up to 5% - No vesting requirement • Adoption Assistance Program • Flexible Spending Account • Educational Assistance Plan and Professional Membership assistance • Referral Bonus Program – up to $750! #LI-Remote Location : Address Remote Location : Country US Apply tot his job