Senior IAM Engineer

At Blue Cross and Blue Shield of Minnesota, we are committed to paving the way for everyone to achieve their healthiest life. We are looking for dedicated and motivated individuals who share our vision of transforming healthcare. As a Blue Cross associate, you are joining a culture that is built on values of succeeding together, finding a better way, and doing the right thing. If you are ready to make a difference, join us.

Blue Cross and Blue Shield of Minnesota is seeking a Senior Identity and Access Management (IAM) Engineer to join our dynamic team. In this role, you will leverage your expertise to support and enhance our identity lifecycle processes, including provisioning and deprovisioning. You will also work with identity governance and privileged access management (PAM) tools to ensure secure and efficient operations. The ideal candidate will have strong programming skills in .NET, C#, SQL, and JavaScript, enabling them to implement changes and optimize solutions as needed.

The Senior IAM Engineer supports identity lifecycle and access management processes and enforcement initiatives enterprise. They will work with multiple platforms, operating systems, servers, and applications across the organization and ensure their security, stability, recoverability, and accessibility. They also analyze and evaluate customer requirements, plan and test systems, and document the framework and standards for integration and implementation. They may function as a lead or a mentor for other engineers and participate in or lead cross-functional initiatives and projects.

• Lead SSO integrations and Zero Trust identity enforcement
• Develops moderate to highly complex infrastructure interactions, such as architect JIT access, just-enough privilege, and identity lifecycle governance to ensure the security, stability, recoverability, and access to systems and information.
• Tracks industry trends and maintains knowledge of new technologies to better serve the enterprise architecture needs.
• Designs, implements, and manages Identity Governance and Administration (IGA) platform to ensure secure and compliant access to applications and data
• Develops and documents the framework for integration and implementation for changes to technical standards.
• Build CI/CD identity automation and logging pipelines
• Engineer modern authentication (FIDO2, passwordless)
• Participates in the RFP process to evaluate and select vendor solutions.
• May have accountability for project execution and resource allocation.
• Conducts detailed analysis and study of customer requirements for new or existing projects to determine feasibility, cost and time required, and compatibility with current systems and hardware capabilities.
• Advises on enterprise-wide infrastructure systems growth requirements, capabilities, and constraints to ensure the long-term functionality and operation standards.
• Participates in or leads cross-functional initiatives on the development and implementation of enterprise-wide major installations, upgrades and process changes.
• Facilitates knowledge sharing by creating and maintaining detailed, comprehensive documentation and diagrams.
• Assists manager in facilitating resource allocation to ensure appropriate staffing levels.
• Performs systems support activities and may include required participation in an on-call rotation for support of systems outside of normal business hours.
• Shares feedback with the manager as requested or deemed appropriate, and may make recommendations for performance reviews.
• Assists manager in facilitating goal accomplishment by providing work direction to assigned employees and by monitoring the status of work on a daily basis.
• Oversees and evaluates the work of contractors and vendors to ensure quality services.
• Provides coaching or mentoring to junior engineers and lead complex deployments

• 5+ years of related professional experience. All relevant experience including work, education, transferable skills, and military experience will be considered.
• Cloud Service Provider Certification (e.g., AWS Cloud Practitioner, Azure Fundamentals, etc.) – required within 1 year of employment
• Deep experience with modern authentication protocols
• Programming languages such as powershell, SQL and C#
• Advanced level knowledge of infrastructure design, implementation, administration, planning, developing.
• Advanced level knowledge of technical, business, and industry.
• Very strong oral and written communication and presentation skills.
• Very strong human relations skills to effectively interact with leadership and management, peers, business partners and vendors.
• Highly skilled at systems, creative, critical and analytical thinking, decision making and problem solving.
• Advanced or specialized understanding of the standards and deliverables to ensure integrity of the systems engineering process.
• Highly skilled at influencing and motivating individuals and teams.
• Certifications: AZ-500, SC-100, CISSP-ISSAP helpful
• High school diploma (or equivalency) and legal authorization to work in the U.S.

• Bachelor's Degree.
• 2+ years of experience programming in .NET, C#, SQL, JavaScript, and GO.
• Experience with CyberArk or other PAM tools.
• Technical Certification Participation in user groups (ACM, IEEE).

Anchored in Connection

Our hybrid approach is designed to balance flexibility with meaningful in-person connection and collaboration. We come together in the office two days each week – most teams designate at least one anchor day to ensure team interaction. These in-person moments foster relationships, creativity, and alignment. The rest of the week you are empowered to work remote.

Pay is based on several factors which vary based on position, including skills, ability, and knowledge the selected individual is bringing to the specific job.

We offer a comprehensive benefits package which may include:

• Medical, dental, and vision insurance

• Life insurance

• 401k

• Paid Time Off (PTO)

• Volunteer Paid Time Off (VPTO)

• And more

To discover more about what we have to offer, please review our benefits page.

At Blue Cross and Blue Shield of Minnesota, we are committed to paving the way for everyone to achieve their healthiest life. Blue Cross of Minnesota is an Equal Opportunity Employer and maintains an Affirmative Action plan, as required by Minnesota law applicable to state contractors. All qualified applications will receive consideration for employment without regard to, and will not be discriminated against based on any legally protected characteristic.

Individuals with a disability who need a reasonable accommodation in order to apply, please contact us at: [email protected].

Blue Cross® and Blue Shield® of Minnesota and Blue Plus® are nonprofit independent licensees of the Blue Cross and Blue Shield Association.