Senior Identity System Engineer, Marshfield

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. Work Shift: 8 Hours - Day Shifts (United States of America) Scheduled Weekly Hours: 40 Compensation: Salary Range: $40.00 - $66.00 Pay starts at $40 and increases according to years of applicable experience. Union Position: No Department Details Saviynt experience highly preferred. Summary The Senior Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs. Job Description The Senior Identity Systems Engineer is an advanced technical role responsible for designing, implementing, and optimizing enterprise identity infrastructure across on-premises and cloud environments. This position leads the architecture of domain topologies, forest structures, and global replication, while ensuring hybrid identity solutions provide seamless sign-in experiences across platforms. The engineer drives the adoption of modern authentication protocols such as Kerberos, OAuth, OpenID Connect, and SAML, and leads initiatives around just-in-time access, privileged session monitoring, and automated access governance. Responsibilities include integrating systems through API calls (REST, SOAP, JSON), managing enterprise PKI and certificate lifecycles, enforcing security baselines via Group Policy, and ensuring compliance with regulatory frameworks such as SOX, HIPAA, and GDPR. In addition to technical execution, the Senior Identity Systems Engineer plays a mentoring role, guiding junior engineers in bestpractices and fostering team knowledge growth. With a focus on innovation and automation, this role ensures that the organization's identity services remain secure, resilient, and aligned with modern zero trust principles and evolving business needs. This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security-first mindset, and least-privilege enforcement. The Senior Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Senior Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment withbusiness objectives, regulatory requirements, and industry best practices. Qualifications Bachelor’s degree required, in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field. Minimum of 3-4 years applicable work experience required. Including but not limited to: • Supporting Active Directory, Domain Services, Hybrid Identities,&Entra ID• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC • Maintaining Public Key Infrastructure (PKI) • Supporting Identity Lifecycle&Access Governance workflows and technical integrations• Implementation of information security standards and procedures including HIPAA and PCI Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired. Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request anaccommodation for help with your online application, please call 1-877-949-5678 or send an email to . The Sanford organization owns and manages multiple distinct brands, including Sanford Health, Marshfield Clinic, and Good Samaritan, as well as Lewis Drug, Sanford Health Equip, Solutions by Sanford, Great Shots, and Blue Rock Bar&Grill. Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. Headquartered in Sioux Falls, South Dakota, the organization has 53,000 employees and serves over 2 million patients and nearly 425,000 health plan members across the upper Midwest including South Dakota, North Dakota, Minnesota, Wyoming, Iowa, Wisconsin and the Upper Peninsula of Michigan. The integrated nonprofit health system includes a network of 56 hospitals, 288 clinic locations, 147 senior care communities, 4,000 physicians and advanced practice providers and nearly 1,500 active clinical trials and studies. The organization’s transformational virtual care initiative brings patients closer to care with access to 78 specialties. Learn more about Sanford Health’s commitment to shaping the future of rural health care across the lifespan at sanfordhealth.org or Sanford Health News. Good Samaritan, one of the nation’s largest nonprofit providers of senior care andservices, is committed to transforming the aging experience through innovation, compassion and personalized care. As part of Sanford Health, an integrated nonprofit health system headquartered in Sioux Falls, South Dakota, Good Samaritan serves 10,000 seniors and offers access to a full continuum ofcare, including 94 rehabilitation and skilled nursing centers, 56 assisted living and memory care facilities, 44 independent living locations and 37 home health and hospice agencies. The senior care provider delivers services across the upper Midwest, with 70% of residents living in rural communities. Learn more about Good Samaritan’s mission and commitment to delivering high quality senior care in rural America at good-sam.com.