Department Name:
IT Identity Access Mgmt-Corp
Work Shift:
Day
Job Category:
Information Technology
Estimated Pay Range:
$50.12 - $83.54 / hour
Banner Health is committed to pay equity and transparency. The posted compensation range is a reasonable estimate that extends from the lowest to the highest pay Banner Health in good faith believes it might pay for this particular job, based on the circumstances at the time of posting.
This range is based on possible base salaries and does not include the value of our total rewards package. Actual pay determined at offer will be based on years of relevant work experience, education, certifications, skills, and geographic location, along with a review of current employees in similar roles to ensure pay equity is achieved and maintained.
Banner Health was named to Fortune's Most Innovative Companies in America 2025 list for the third consecutive year and named to Newsweek's list of Most Trustworthy Companies in America for the second year in a row. We're proud to be recognized for our commitment to the latest health care advancements and excellent patient care.
The Cybersecurity Engineer III is a senior-level position serving as technical team lead for our Identity Engineering team, responsible for managing and advancing identity solutions across multiple enterprise platforms including AWS IAM, Microsoft Entra ID, Microsoft Entra External ID, and Okta. This role requires deep expertise in Cloud Identity and Access Management (IAM) technologies, best practices, and processes, with the ability to serve as the technical expert and go-to resource for team members delivering secure, scalable identity solutions across our multi-cloud environment. The ideal candidate will demonstrate mastery in AWS Identity & Access Management, including advanced capabilities in IAM policies, roles, permission boundaries, service control policies, identity federation, and cross-account access strategies. Strong expertise in Microsoft Identity technologies (Active Directory, Entra ID, Entra External ID, Entra Connect, Conditional Access Policies) and Okta Customer Identity platform is also essential. Proficiency in Single Sign-On Authentication protocols (SAML, OIDC, OAuth) and their implementation across cloud platforms is required. As team lead, you will be the technical resource that team members look to for guidance while implementing and maintaining these critical identity platforms, establishing standards, processes, and procedures that advance IAM governance and facilitate secure operations.
This position requires extensive knowledge of IAM standard methodologies with the ability to advise cross-functional teams on cloud identity governance and management strategies, particularly within AWS environments. Experience in developing comprehensive IAM strategies, leading large-scale implementations and platform updates, and integrating IAM solutions with business systems-especially AWS-native services and multi-cloud architectures-is highly desired. The role demands strong technical leadership capabilities to mentor junior engineers, coordinate with cross-functional teams, and drive process simplification initiatives. Candidates should be self-motivated with exceptional attention to detail, strong collaboration skills, and the ability to deliver results in a dynamic, technically complex environment. Possession of professional-level certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect, Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, or Okta Certified Professional is preferred. Additional responsibilities include contributing to end-user satisfaction, fostering team development through knowledge sharing, and maintaining our position as leaders in identity engineering excellence. This is a fully remote position and available if you live in the following states only: AK, AR, AZ, CA, CO, FL, GA, IA, ID, IN, KS, KY, MD,MI, MN, MO, MS, NC, ND, NE, NM, NV, NY, OH, OK, OR, PA, SC, TN, TX, UT, VA, WV, WA, WI & WY.
Your pay and benefits (Total Rewards) are important components of your Journey at Banner Health. Banner Health offers a variety of benefit plans to help you and your family. We provide health and financial security options, so you can focus on being the best at what you do and enjoying your life.
Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.
POSITION SUMMARY
This position leads the designs, develops, configures, implements, tunes, maintains solutions, resolve technical and business issues related to cybersecurity threat & vulnerability management, identity management, security operations center, forensics, and data protection. Cybersecurity Engineers work with Cybersecurity Architects to execute strategic cyber initiatives, evaluate security components of the network, applications and end-user devices, and provides guidance to ensure new systems meet regulatory and technical standards. Cybersecurity Engineers leads root-cause analysis on Cyber systems to determine improvement opportunities when failures occur. Cybersecurity Engineers work closely with other IT organizations to ensure cyber products are working and integrating with non-cyber environments (apps, networks, End User devices, Servers, etc).
CORE FUNCTIONS
Proactively initiates the design and implementation of cybersecurity solutions, upgrades, enhancements, while looking forward three to five years.
Leads in providing technical expertise and support for cybersecurity solutions, including operational aspects of the software.
Serves as subject matter expert in the design, implementation, and compliance of secure baseline configurations for applications and infrastructure components.
Proactively initiates technical assessments of systems and applications to ensure compliance with policy, standards and regulations.?
Authors new cybersecurity standards and procedures. Leads the revision of existing cybersecurity policies, standards, and procedures, as needed.?
Serves as technical leader for cybersecurity projects, including the development of project scope requirements, budgeting, work breakdown and operational handoff.
Identify threats and develop suitable defense measures, evaluate system changes for security implications, and recommend enhancements, research, and draft cybersecurity white papers, and provide first-class support to the cybersecurity operations staff for resolving difficult cybersecurity issues.
Under limited direction, self starter, this position is responsible for cybersecurity across multiple departments system-wide and requires interaction at all levels of staff and management. Work closely on cross functional IT Teams. Leads work through indirect leadership across other cyber resources. Articulate complex Security functions into simple business ease.
MINIMUM QUALIFICATIONS
Must possess strong knowledge of business, information security and/or computer science as normally obtained through the completion of a bachelor's degree.? Bachelor's Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent.
Experience normally obtained through seven plus years of experience of enterprise-scale information security engineering, preferably in healthcare.?Must also possess three plus years' experience in a healthcare environment or an equivalent combination of relevant education, technical, business and healthcare experience.?
Experience with IT operations, automation of security processes, coding and scripting languages, ability to document security processes as well as use case development. Experience with the assessing cyber products, including vendor selection, define requirements, contractual documentation development. Experienced assessing and reaching out to vendors for needed features via enhancement requests. Expert understanding of regulatory and compliance mandates, including but not limited to HIPAA, HITECH, PCI, Sarbanes-Oxley. Experienced in planning, designing and implementing cybersecurity solutions, operating, maintaining and managing the lifecycle of cybersecurity solutions. Advanced knowledge of Security Engineering Principles, including risk management, resilience, vulnerability management, Information Security, NIST, MITRE ATT@CK, etc. Advanced expertise in Cyber products supporting Data Loss Prevention, EDR, AntiVirus, Perimeter services, threat systems, cyber platform analytics, SIEM, CASB, CLOUD Security, ETC. Proven Cloud Security experience. Requires independent judgment, critical decision making, excellent analytical skills, with excellent verbal and written communications. Ability to think quickly under difficult or complex conditions and clearly communicate to appropriate staff; ability to balance project workloads with customer support and on-call demands. Must demonstrate deep knowledge of information technology and information security principles and practices. Requires communication and presentation skills to engage technical and non-technical audiences. Requires ability to communicate and interact across facilities and at various levels. Incumbent will have skills to mentor less experienced team members. As is typical in this industry, variable shifts and hours and responding to after-hours notifications may be required.?
PREFERRED QUALIFICATIONS
Certification in two or more of the following areas Systems Security Certified Practitioner (SSCP), HealthCare Information Security & Privacy Practitioner, (HCISPP), CompTIA Security+, Certified Information Systems Security Professional (CISSP) - Engineering (ISSEP), Certified Ethical Hacker (CEH), SANS GIAC, or Certified Information Systems Auditor (CISA).? Four plus years as a System Administrator or in IT Operations. Or four plus years in risk management or GRC experience in the healthcare/medical environment. Five plus years' experience in a healthcare environment or an equivalent combination of relevant education, technical, business and healthcare experience.?
Additional related education and/or experience preferred.
EEO Statement:
EEO/Disabled/Veterans (https://www.bannerhealth.com/careers/eeo)
Our organization supports a drug-free work environment.
Privacy Policy:
Privacy Policy (https://www.bannerhealth.com/about/legal-notices/privacy)
EOE/Female/Minority/Disability/Veterans
Banner Health supports a drug-free work environment.
Banner Health complies with applicable federal and state laws and does not discriminate based on race, color, national origin, religion, sex, sexual orientation, gender identity or expression, age, or disability
