Identity System Engineer

# Careers With Purpose Identity System Engineer page is loaded## Identity System Engineer locations:
SD, Sioux Falls:
WI, Marshfield:
MN, Bemidji:
ND, Fargotime type:
Full time posted on:
Posted Todayjob requisition :
R-0246584
** Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. We’re proud to offer many development and advancement opportunities to our nearly 50,000 members of the Sanford Family who are dedicated to the work of health and healing across our broad footprint.
*
* Work Shift:

8 Hours - Day Shifts (United States of America)
Scheduled Weekly

Hours:

40

Salary Range: $34.50 - $57.00

Pay starts at $34.50 and increases according to years of applicable experience.
** Union Position:
** No
* * Department Details
**** Summary
* * The Identity Systems Engineer is responsible for implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs.
** Job Description
** The Identity Systems Engineer is a mid-level role responsible for implementing, maintaining, and securing enterprise identity infrastructure across both on-premises and cloud environments. This position deploys and manages Active Directory services, including domain controllers, OU structures, replication health, schema extensions, and trust relationships, while ensuring alignment with business and security requirements. The engineer oversees synchronization between AD, Entra , and other identity platforms, enabling seamless hybrid identity and single sign-on for applications.

Core responsibilities include configuring and managing secure authentication methods, administering enterprise PKI and certificate life cycles, and enforcing access governance policies through Group Policy Objects and role-based models. The role also integrates systems via API calls (REST, SOAP, JSON), automates provisioning and de-provisioning workflows, and supports modern authentication protocols such as Kerberos, OAuth, OpenID Connect, and SAML. In addition, the Identity Systems Engineer enforces least privilege, conducts access audits, supports compliance with SOX, HIPAA, and GDPR, and provides technical expertise during audits and governance reviews.

With a technical focus complemented by operational oversight, this role ensures the organization's identity services remain secure, resilient, and aligned with both regulatory and business objectives.

This role requires technical expertise in Active Directory, Entra , authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, problem-solving skills, a security-first mindset, and least-privilege enforcement. The Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.
** Qualifications
* * Bachelor’s degree required, in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.
Minimum of 1 to 2 years applicable work experience required. Including but not limited to:
• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
• Maintaining Public Key Infrastructure (PKI)
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations
• Implementation of information security standards and procedures including HIPAA and PCI    Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.
** Sanford is an EEO/AA Employer M/F/Disability/Vet.
**** If you are an individual with a disability and would like to request an accommodation for help with your online application, please call or send an email to talent.*
* #J-18808-Ljbffr