Identity Access Management Engineer

Pediatric Home Service is a friendly and professional leader in home health care with a singular passion for and commitment to taking care of the child. As a leader in home health care, we help kids achieve their best lives at home and in their communities while providing our employees a fun and rewarding place to work.

• Position: Identity Access Management Engineer
• Location: Roseville, MN
  • In Office/Hybrid
• Hours: Monday-Friday, 8a-5p

THE POSITION:

We’re looking for an IAM Engineer to join our Digital Infrastructure & Operations team. In this role, you’ll own identity and access management while supporting Microsoft 365 collaboration tools for over 2,000 users.

This is a great opportunity for someone who enjoys balancing security with user experience, improving systems, and partnering across teams to deliver scalable solutions.

Identity & Access Management (Primary Domain)

• Design, implement, and operate IAM solutions using Microsoft Entra ID (Azure AD)
• Own identity lifecycle management, including provisioning, deprovisioning, and role-based access
• Configure and manage SSO, MFA, and Conditional Access policies to balance security and usability
• Administer identity governance, access reviews, and least-privilege access models
• Integrate identity services with enterprise and third-party applications
• Proactively monitor service health and mitigate identity-related risks and security events
• Respond to and resolve service incidents in a timely manner
• Participate in problem management and root cause analysis to improve service reliability
• Automate identity lifecycle and administrative processes using PowerShell and Microsoft Graph

Microsoft 365 Collaboration Services (Secondary Domain)

• Design, implement, and operate Microsoft 365 collaboration platforms, including Exchange Online, Teams, SharePoint, and OneDrive
• Manage platform configurations, policies, and governance to enable secure and effective collaboration
• Ensure availability and performance of collaboration tools
• Troubleshoot and resolve service issues, minimizing business disruption
• Drive continuous improvement and adoption of best practices for collaboration experiences
• Partner with Service Desk support team to ensure consistent service delivery

Security, Compliance & Risk Management

• Enforce identity and access security controls aligned with organizational and regulatory requirements (e.g., HIPAA)
• Partner with security teams to strengthen identity posture and reduce risk
• Support audits and compliance initiatives related to identity and collaboration services

Business Alignment & Enablement

• Align identity and collaboration services with clinical, operational, and administrative workflows
• Act as a strategic partner to stakeholders, translating business needs into secure, scalable solutions
• Improve user experience while maintaining strong security and governance controls

THE QUALIFICATIONS:

What You Bring

• 3+ years of experience in Identity & Access Management
• Strong understanding of identity lifecycle and access governance
• Experience with SSO, MFA, and Conditional Access
• Hands-on experience with Microsoft Entra ID (Azure AD)
• Experience supporting Microsoft 365 platforms
• Strong problem-solving and communication skills

Nice to Have

• Experience in healthcare or regulated environments

• Familiarity with hybrid identity (on-prem + cloud)
• Scripting experience (PowerShell, Microsoft Graph)
• Relevant certifications (SC-300, MS-100/101, etc.)

THE COMPANY

Pediatric Home Service is a pediatric home health agency that