IAM系统开发工程师 II

Hours:
Shift Start Time:
8 AMShift End Time:
4:30 PMAWS Hours Requirement:
8/40 - 8 Hour ShiftAdditional Shift Information:
Weekend Requirements:
As NeededOn-Call Required:
YesHourly Pay Range (Minimum - Midpoint - Maximum):
$57.740 - $74.490 - $83.440The stated pay scale reflects the range that Sharp reasonably expects to pay for this position.  The actual pay rate and pay grade for this position will be dependent on a variety of factors, including an applicant’s years of experience, unique skills and abilities, education, alignment with similar internal candidates, marketplace factors, other requirements for the position, and employer business practices.

What You Will Do
The Identity and Access Management (IAM) Systems Developer II is responsible for the end-to-end design, engineering, and optimization of enterprise IAM solutions. This role leads complex integrations, applies advanced security standards, and partners with architecture and security teams to ensure the organization's identity ecosystem is secure, scalable, and aligned to zero-trust principles.

Required Qualifications
· 5 Years experience in IAM system development or related security-focused software development and administration.

• Experience with cloud platforms (AWS, Azure, Google Cloud) and their IAM services and components. Experience interfacing to API endpoints for development and integration purposes.

Preferred Qualifications
· Experience in a health care environment.

• CompTIA Security+ - CompTIA -PREFERRED

• Certified Information Systems Security Professional (CISSP) - (ISC)² -PREFERRED

Other Qualification Requirements· Bachelor's degree in Computer Science, Information Systems, or related field; or 4 years of relevant experience in information systems may substitute for degree. - REQUIRED
· Certified Identity and Access Manager (CIAM) - Identity Management Institute - REQUIRED Certified Identity and Security Technologist (CIST) - Identity Management Institute is required within 1 year of hire. Department to track and maintain this certification.

Essential Functions

• Design and Development
• Define technical standards, frameworks, and best practices for IAM solution implementation.
• Lead development of custom IAM connectors, APIs, and automation scripts.
• Develop, maintain, and optimize IAM workflows and automated processes which support and enforce role-based access controls (RBAC).
• Write and maintain SailPoint Beanshell and Java-based rules, workflows, and scripts.
• Implement lifecycle management processes, including provisioning, deprovisioning, transfers, and other changes in status as defined by Human Resources Information Systems (HRIS) data.
• Develop and manage connections between Sharp's Identity Governance and Administration (IGA) platform and various enterprise applications, whether they are hosted on-site or in the cloud.
• Customize IAM systems using APIs, scripting, and configuration tools.
• Engage in code review and unit testing activities in alignment with our Software Development Life Cycle (SDLC) methodology.
• Engage in the review, documentation, and contribution to Sharp's Identity and Access Management (IAM) repositories hosted on GitHub, ensuring alignment with organizational standards and practices.
• Configure and schedule Access Certifications in our Sharp's Identity Governance platform.
• Evaluate and recommend IAM tools and technologies to enhance security posture.
• Interprets and translates functional specifications into efficient and effective code development.

• System Integration
• Deploy authentication and authorization protocols to secure 3rd party applications and systems (e.g., SAML, OAuth 2.0, OpenID Connect, LDAP, SCIM).
• Lead proof-of-concept and pilot deployments for new IAM initiatives.
• Integrate current Single Sign-On (SSO) solution with enterprise applications.
• Integrate SailPoint with directories (e.g., Active Directory, LDAP), HRIS systems, and cloud platforms.
• Develop connectors for automated user account management across systems.
• Build and maintain systems and processes for user access requests and approvals.
• Implement SCIM, REST, and SOAP integrations for application onboarding.

• Security and Compliance
• Ensure IAM solutions meet regulatory requirements (e.g., SOX, HIPAA).
• Collaborate with security teams to enforce least-privilege and zero-trust principles.
• Conduct regular audits, monitoring, and reporting of user access.
• Collaborate with auditors to provide documentation and evidence of IAM controls.

• Collaboration and Support
• Partner with business units and IT teams to gather IAM requirements and translate them into technical solutions.
• Provide technical expertise for troubleshooting, root cause analysis, and incident resolution.
• Document system designs, technical processes, workflows, system configurations, and integration.
• Provide technical mentorship to IAM System Developer I and IAM Analysts.

• Problem Resolution
• Performs a thorough problem analysis using sound judgment, initiative, and own discretion.
• Identifies root cause and determines remedies for problems.
• Identifies and communicates options and proposed solutions.
• Develops a comprehensive analysis of pros/cons and implications of proposed solutions.
• Demonstrates strategic and forward thinking by conducting thorough analyses of downstream and upstream impact of issues and proposed solutions.
• Seeks out required data for problem analysis and resolution.
• Responds to on-call issues in a manner and timeframe consistent with the department guidelines, including ticket transfer procedures, if transferring is appropriate.

• Project Management
• Analyzes department and client needs to develop a workable training plan.
• Determines and plans for appropriate project task support and task communication.
• Determines an accurate scope, definition, and charter for the project tasks.
• Identify, document, and communicate to PM and leadership any issues that will impede progress in the project.
• Uses knowledge of IS standards and proactive thinking to determine technical specifications per IS standards.
• Creates test plans through thorough knowledge of the product and strategic thinking regarding user and system behavior.
• Adheres to the organizational change management procedures in our ITSM and project management software.
• Plans and implements Inservice as needed.
• Establishes and completes project documentation requirements in a timely manner.
• Establishes project task timelines and completes project tasks within promised timeframes.

Completes Go-Live plan and support.

Other duties as assigned.

• Professional Competency
• Certified Identity and Security Technologist (CIST) - Identity Management Institute is required within 1 year of hire.
• Maintains required certifications.
• Obtains other certifications and attends seminars or training as required by the department.
• Maintains knowledge of systems and applications.

Knowledge, Skills, and Abilities
· Knowledge of the health care environment.

• Strong problem-solving and analytical skills.

• Good communication skills, Ability to communicate complex technical concepts to non-technical stakeholders.

• Ability to work well with and coordinate the efforts of others and function as a member of a project team.

• Self-motivated, detail-oriented, and able to work independently.

• Possesses good detail follow through execution.

• Proficiency in programming/scripting (e.g., Java, Python, PowerShell, JavaScript).

• Expertise with IAM platforms such as (e.g., SailPoint IdentityIQ, Non-Employee Risk Management (NERM) CyberArk, Okta, ForgeRock, Ping Identity, Microsoft Entra ID, Active Directory).

• Strong Background in identity protocols & standards (e.g., SAML, OAuth, OpenID Connect, SCIM, LDAPS, and PKI).

• Strong understanding of IAM concepts: RBAC, ABAC, provisioning, certification, and role mining.

• Familiarity with databases (SQL/Oracle).

Sharp HealthCare is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability or any other protected class

Originally posted on Himalayas