Azure Identity Access Management Engineer III
Job Category: Information Technology
Department: IT Operations & Infrastructure
Location:
Los Angeles, CA, US, 90017
Position Type: Full Time
Requisition ID: 12739
Salary Range: $105,267.00 (Min.) - $139,478.00 (Mid.) - $173,689.00 (Max.)
Established in 1997, L.A. Care Health Plan is an independent public agency created by the state of California to provide health coverage to low-income Los Angeles County residents. We are the nation's largest publicly operated health plan. Serving more than 2 million members, we make sure our members get the right care at the right place at the right time.
Mission: L.A. Care's mission is to provide access to quality health care for Los Angeles County's vulnerable and low-income communities and residents and to support the safety net required to achieve that purpose.
Job Summary
The Azure Identity Access Management (IAM) Engineer III is responsible for leading the design, implementation, and managing secure identity and access solutions within the Microsoft Azure ecosystem. This position plays a critical part in enforcing least privilege access, protecting sensitive data, and ensuring compliance with regulatory frameworks such as Health Insurance Portability and Accountability Act (HIPAA), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO) 27001. This position ensures a secure, scalable, and compliant access to cloud resources while driving automation and innovation in IAM practices.
The Engineer will support Azure Active Directory, Azure B2C, and related identity services that underpin the organization's digital platforms, including the new Salesforce-based Member and Provider portals.
Acts as a Subject Matter Expert (SME), serves as a resource and mentor for other staff.
Duties
Design, implement and maintain a secure IAM solutions using Azure, including Azure AD and Azure B2C.
Configure and maintain authentication and authorization technologies.
Develop and enforce security policies and procedures for least privilege, conditional access, and identity governance.
Develop, evaluate, and integrate IAM solutions with enterprise applications, including Salesforce, Microsoft 365, and third-party platforms.
Monitor IAM systems for performance, troubleshoot issues, and conduct regular audits to ensure compliance with regulations and internal policies. Respond to identity-related security incidents and anomalies.
Collaborate with cross-functional teams to integrate and ensure IAM solutions meet regulatory requirements.
Support the secure onboarding of users and applications to Azure B2C for external member and provider access.
Automate identity lifecycle management using scripting and orchestration tools.
Provide subject matter expertise on IAM technologies and best practices and stay current with industry trends. Maintain documentation and contribute to IAM governance frameworks and best practices.
Create technical documentation, process guidelines, and system architecture diagrams.
Participate in audits and assessments related to identity and access controls.
Apply subject matter expertise in evaluating business operations and processes. Identify areas where technical solutions would improve business performance. Consult across business operations, provide mentorship, and contribute specialized knowledge. Ensure that the facts and details are correct so that the program's deliverable meets the needs of the department, organization and legislation's policies, standards, and best practices. Provide training and recommend process improvements as needed.
Perform other duties as assigned.
Duties Continued
Education Required
Bachelor's Degree in Computer Science or Related Field
In lieu of degree, equivalent education and/or experience may be considered.
Education Preferred
Master's Degree in Computer Science or Related Field
Experience
Required:
At least 5 years of experience in identity and access management, with a focus on Azure.
Experience with Azure AD, Azure B2C, and conditional access policies
Experience with scripting and automation.
Preferred:
Experience in the healthcare payer industry.
Experience integrating IAM with Salesforce and other SaaS platforms.
Experience with identity governance tools (e.g., SailPoint, Saviynt)
Skills
Required:
Strong understanding and working knowledge of security and regulatory compliance frameworks (HIPAA, NIST, ISO 27001)
Strong understanding of identity federation, SSO, OAuth, OpenID Connect, and SAML
Proficiency in scripting (PowerShell, Python).
Excellent analytical and critical thinking skills.
Effective communication skills including verbal, written and presentation; speaks clearly and persuasively in positive or negative situations.
Strong time management and organizational skills.
Ability to work independently and provide leadership within a team environment.
Ability to produce deliverables and tasks on time.
Ability to collaborate with strong teamwork skills and work well independently with limited supervision.
Preferred:
Familiarity with DevSecOps and cloud-native security practices.
Familiarity with identity governance tools.
Knowledge of project lifecycle management.
Licenses/Certifications Required
Licenses/Certifications Preferred
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Certified Information Systems Security Professional (CISSP)
Or equivalent security certification
Required Training
Preferred:
Azure-specific IAM and security training
Physical Requirements
Light
Additional Information
This position is critical to enabling secure, compliant, and user-friendly access to digital healthcare services for members and providers.
Salary Range Disclaimer: The expected pay range is based on many factors such as geography, experience, education, and the market. The range is subject to change.
L.A. Care offers a wide range of benefits including
Paid Time Off (PTO)
Tuition Reimbursement
Retirement Plans
Medical, Dental and Vision
Wellness Program
Volunteer Time Off (VTO)
