Azure Identity Access Management Engineer III

Overview

Salary Range: $ (Min.) - $ (Mid.) - $ (Max.)

Established in 1997, L.A. Care Health Plan is an independent public agency created by the state of California to provide health coverage to low-income Los Angeles County residents. We are the nation’s largest publicly operated health plan, serving more than 2 million members. We ensure our members get the right care at the right place at the right time.

Mission: L.A. Care’s mission is to provide access to quality health care for Los Angeles County's vulnerable and low-income communities and residents and to support the safety net required to achieve that purpose.

The Azure Identity Access Management (IAM) Engineer III is responsible for leading the design, implementation, and management of secure identity and access solutions within the Microsoft Azure ecosystem. This position enforces least privilege access, protects sensitive data, and ensures compliance with regulatory frameworks such as HIPAA, NIST, and ISO 27001. It ensures secure, scalable, and compliant access to cloud resources while driving automation and innovation in IAM practices.

The Engineer will support Azure Active Directory, Azure B2C, and related identity services that underpin the organization’s digital platforms, including the new Salesforce-based Member and Provider portals.

Acts as a Subject Matter Expert (SME), and serves as a resource and mentor for other staff.

• Design, implement and maintain a secure IAM solution using Azure, including Azure AD and Azure B2C.
• Configure and maintain authentication and authorization technologies.
• Develop and enforce security policies and procedures for least privilege, conditional access, and identity governance.
• Develop, evaluate, and integrate IAM solutions with enterprise applications, including Salesforce, Microsoft 365, and third-party platforms.
• Monitor IAM systems for performance, troubleshoot issues, and conduct regular audits to ensure compliance with regulations and internal policies. Respond to identity-related security incidents and anomalies.
• Collaborate with cross-functional teams to integrate and ensure IAM solutions meet regulatory requirements.
• Support the secure onboarding of users and applications to Azure B2C for external member and provider access.
• Automate identity lifecycle management using scripting and orchestration tools.
• Provide subject matter expertise on IAM technologies and best practices; stay current with industry trends. Maintain documentation and contribute to IAM governance frameworks and best practices.
• Create technical documentation, process guidelines, and system architecture diagrams.
• Participate in audits and assessments related to identity and access controls.
• Apply subject matter expertise in evaluating business operations and processes. Identify areas where technical solutions would improve business performance. Consult across business operations, provide mentorship, and contribute specialized knowledge. Ensure that facts and details are correct so that the program's deliverables meet the needs of the department, organization and legislation's policies, standards, and best practices. Provide training and recommend process improvements as needed.
• Perform other duties as assigned.

• Required: Bachelor's Degree in Computer Science or Related Field. In lieu of degree, equivalent education and/or experience may be considered.
• Preferred: Master's Degree in Computer Science or Related Field.

• Required: At least 5 years of experience in identity and access management, with a focus on Azure; experience with Azure AD, Azure B2C, and conditional access policies; experience with scripting and automation.
• Preferred: Experience in the healthcare payer industry; experience integrating IAM with Salesforce and other SaaS platforms; experience with identity governance tools (e.g., SailPoint, Saviynt).

• Required: Strong understanding of security and regulatory compliance frameworks (HIPAA, NIST, ISO 27001); strong understanding of identity federation, SSO, OAuth, OpenID Connect, and SAML; proficiency in scripting (Power Shell, Python); excellent analytical and critical thinking skills;…