Identity Security Engineer – Microsoft Active Directory and Entra ID (Remote)

Discover Vanderbilt University Medical Center:  Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health is committed to an environment where everyone has the chance to thrive and where your uniqueness is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

VEC Central Dir /Legacy Access

Job Summary:

Manage, maintain, and support identity and authentication-related components of:
• On-premises Microsoft Active Directory environments
• Microsoft Entra ID tenants
• Federated authentication / single sign-on (SSO) services (e.g., Entra ID)
• Authentication services (e.g., Kerberos and RADIUS)
• Multi-factor authentication (MFA) services (e.g., Microsoft Entra MFA, SafeNet Trusted Access (STA))
• Public key infrastructure (PKI) services (e.g., Microsoft Active Directory Certificate Services (AD CS))
• Privileged authentication management (PAM) systems (e.g., CyberArk)
• Work closely with other IT team members to integrate systems into VUMC’s identity environments. Conduct duties under occasional guidance.

.

KEY RESPONSIBILITIES

• Responsible for the ongoing operational support of VUMC identity solutions and related applications.

• Document current and proposed environments.

• Maintain processes, procedures, and documentation around all core processes that interact with identity systems.

• Assist in onboarding new applications utilizing SSO.

REQUIREMENTS:

• Solid experience with directory services like Microsoft Active Directory and Entra ID (required).

• Bachelor's degree or two years relevant experience with identity systems support.

• Identity-related experience in Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments is a plus.

TECHNICAL CAPABILITIES:
AUTHENTICATION/AUTHORIZATION (Intermediate): Demonstrates mastery of Authentication and Authorization Services in practical applications of a difficult nature.  Knowledgeable of several authentication methods such as NTLM, Kerberos, SAML and OpenID Connect.  Participates in the design of the Company's authorization service.

SECURITY ARCHITECTURE (NOVICE): Familiar with foundational concepts of security architecture and related tools and utilities. Has a solid understanding of security that supports a major application, computer system or other component of the organization's corporate architecture.  Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems.

SERVER SECURITY (NOVICE): Has detailed knowledge of the functionality of security systems and understands how they work and interface with data, applications and systems. Able to explain and document the functionality of security requirements and how they relate to the business and an information security program.

About the Department:

VUMC Enterprise Cybersecurity (VEC)

VUMC Enterprise Cybersecurity focuses on protecting Vanderbilt Health from the numerous cyberthreats that exist in today’s world. They work to identify and mitigate risks, create proactive solutions to manage these risks, and develop a strong culture of safety and security within the organization.

Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and community affairs, human resources, communications and marketing, development, facilities, and many more.

At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose.

Core Accountabilities:

Organizational Impact: Executes job responsibilities with the understanding of how output would affect and impact other areas related to own job area/team with occasional guidance. Problem Solving/ Complexity of work: Analyzes moderately complex problems using technical experience and judgment. Bre