IAM Triage Engineer (Onsite based in Dallas, TX or remote if not local to DFW))

Tenet Healthcare Corporation (NYSE: THC) is a diversified healthcare services company headquartered in Dallas with more than 100,000 employees. Through an expansive care network that includes United Surgical Partners International, we operate 60 hospitals and approximately 460 other healthcare facilities, including surgical hospitals, ambulatory surgery centers and imaging centers and other care sites and clinics. We also operate Conifer Health Solutions, which provides revenue cycle management and value-based care services to hospitals, health systems, physician practices, employers and other clients. Across the Tenet enterprise, we are united by our mission to deliver quality, compassionate care in the communities we serve. For more information, please visit www.tenethealth.com.

JOB DESCRIPTION

Be the frontline defender to safeguard user identities that are core to protecting patient care, critical data and providing timely access to our healthcare workforce. Join our team to secure access and solve complex problems in the Identity Access Management space. If you get the thrill in protecting data and intellectual property by proactively designing access attack resistant solutions, then this is the job for you!

Tenet Healthcare is seeking an experienced Identity Access Management Triage Engineer to work with our IAM team to build, monitor and deliver cutting edge IAM solutions. This role is essential in maintaining secure and efficient access across the company and applications. 

A primary focus for this role will be working across Tenet and its business lines to review existing IAM processes, technology and come up with a best-in-class solutions. This is an active, hands-on role, responsible for end-end planning, design, process optimization and efficiencies, technical troubleshooting, implementation and collaboration with our stakeholders.

This role offers unique opportunity to drive meaningful change by developing, implementing, monitoring IAM solutions to drive seamless user experience and right access to the right users for right reasons.

REPORTING STRUCTURE & WORK SETTING

Position reports directly to the Director, Identity Access and Application Security, as part of the Identity Access Management team which is a part of Enterprise Cybersecurity function led by Chief Information Security Officer. Position will be officed in our Dallas, Texas Corporate office, or may be eligible for remote work for the right candidates. 

OTHER REPRESENTATIVE DUTIES

• Manage On/Off Boarding tasks such as account and access creation, terminations.
• Provide application role- based access, perform Prov/De Provisioning tasks
• Required to provision accounts in Enterprise directory services (Active Directory, Azure) and Cloud based applications.
• Administer user accounts and access privileges in the organization’s identity management system.
• Work closely with the IAM team to ensure that the right people have access to the right resources.
• Responsible for the day-to-day administration of the IAM system.
• Participates in IAM projects and initiatives and troubleshoots IAM related issues
• Work with internal customers, business analysts, and application teams to understand access requirements.
• Maintain documentation for the IAM program.
• Participate in IAM audits and review access control reports to identify potential risks.
• Work with Audit team to understand the root cause of issues and findings and suggest solutions
• Okta and CyberArk Engineering Support and Troubleshooting
• Ensures the maintenance, patching, operating, and monitoring of IAM systems
• Required to perform Multi Factor Authentication (MFA) admin and system related tasks.
• Handling ad hoc incidents and support requests and performs RCAs by coordinating with various teams.
• Incorporate process changes and updates into the Standard Operation Procedures (Runbooks) 

EDUCATION AND WORK EXPERIENCE

• 8+ years of work experience
• Bachelors/Masters’ Degree or related technology degree
• Certifications preferred – PMP, ITIL, Identity Certifications
• CISSP, CISA, CISM, and/or International Information System Security Certification Consortium certification is a plus.

SPECIALIZED KNOWLEDGE, SKILLS & ABILITIES:

• Identity and Access Management experience
• Expert knowledge of Access Management technologies and knowledge of cloud identities
• NIST and/or SOC2 experience a plus
• In-depth understanding of modern authentication solutions using SAML/OAuth/OIDC
• In depth knowledge of Directory services such as LDAP, Microsoft Active Directory, Azure
• Experience in implementing Okta, CyberArk, IGA tools with troubleshooting skills
• Strong time management skills
• IAM operations knowledge
• IAM Execution and hands on ticket resolution skills
• Familiarity with ITIL and ITSM processes and ServiceNow tool
• This role will be required to work in flexible shift timings supporting US business hours.

Compensation

• Pay: $89,440 - $143,104 annually. Compensation depends on location, qualifications, and experience. 
• Staff level positions may be eligible for sign-on and relocation bonuses.  

Benefits

The following benefits are available, subject to employment status:

• Medical, dental, vision, disability, life, AD&D and business travel insurance
• Manager Time Off – 20 days per year
• Discretionary 401k with up to 6% employer match
• 10 paid holidays per year
• Health savings accounts, healthcare & dependent flexible spending accounts
• Employee Assistance program, Employee discount program
• Voluntary benefits include pet insurance, legal insurance, accident and critical illness insurance, long term care, elder & childcare, auto & home insurance.
• For Colorado employees, paid leave in accordance with Colorado’s Healthy Families and Workplaces Act.

#LI-NO1  

Tenet Healthcare complies with federal, state, and/or local laws regarding mandatory vaccination of its workforce. If you are offered this position and must be vaccinated under any applicable law, you will be required to show proof of full vaccination or obtain an approval of a religious or medical exemption prior to your start date. If you receive an exemption from the vaccination requirement, you will be required to submit to regular testing in accordance with the law.