Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added just now
NM
Financial Advisor
Northwestern Mutual
Bedminster, NJ
- $137,000 to $250,000 USD / year
Top 25% advisor annual earnings of $137K-$250K (based on 2018-2023 company data for top quartile advisors in the first 3 years)
Added just now
VH
Senior Social Worker - Oncology
Veterans Health Administration
Baltimore, MD
- $110,910 to $144,186 USD / year
Reviews all data, subjective and objective, and makes a clinical assessment, identifying needs and strengths.
Added just now
VH
Transportation Assistant (OA)
Veterans Health Administration
West Palm Beach, FL
- $48,361 to $62,869 USD / year
For a GS-6 position you must have served 52 weeks at the GS-5 · The grade may have been in any occupation, but must have been held in the Federal service
Added just now
VH
Senior Licensed Professional Mental Health Counselor-Clinical Resource Hub
Veterans Health Administration
Location Negotiable After Selection
- $89,508 to $116,362 USD / year
Any selected candidate must live within 50 miles of a VA Medical Center
Added just now
CF
IT Program Manager (Data Management) (Data Scientist)
Centers for Medicare & Medicaid Services
Woodlawn, MD · Dallas, TX
- $115,711 to $158,322 USD / year
Basic Requirement: You must have IT-related experience demonstrating each of the four competencies listed below:
Added just now
C
Mid-Level Product Engineer
Clera
San Francisco, CA
- $150,000 to $300,000 USD / year
- Design APIs and data models, and build frontend and backend functionality.
Added just now
C
Senior Android Software Engineer
Clera
San Francisco, CA
- $160,000 to $200,000 USD / year
- Design, implement, and maintain the Android application.
Added just now
C
Full-Stack Software Engineer, Design
Clera
San Francisco, CA
- $130,000 to $225,000 USD / year
- Experience working closely with engineers and researchers; familiarity with developer tools, data-rich products, research software, AI agents, evaluations, reinforcement learning, or…
Added just now
Senior / Principal Systems Engineer
Anzu Partners
Waltham, MA
…software with clear interfaces and error budgets, and into test design including calibration plates, fixtures, and reference test…
Added just now
IT Administrator
Vast
Long Beach, CA
…Vast the only operational commercial space station company to design, build, and operate its own spacecraft in orbit. Next, Haven-1 is targeted to become the world’s first commercial space…
Added just now
Compensation Analyst II
Vast
Long Beach, CA
…Vast the only operational commercial space station company to design, build, and operate its own spacecraft in orbit. Next, Haven-1 is targeted to become the world’s first commercial space…
Added just now
Geotechnical Engineer In Training
Vertex Resource Group
Conroe, TX
Experience interpreting field and laboratory geotechnical data.
Added just now
Metrology Engineer
Anduril Industries
Atlanta, GA
…OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is…
Added just now
Materials Engineer, Design Allowables & Materials Data
Anduril Industries
Costa Mesa, CA
…Advancing our products depends on trusted, analysis-ready material data across this full range of materials, generated and governed at the pace our programs move. This role owns the…
Added just now
Analyst Data Management
Thomas Jefferson University
Montgomery County, PA
Responsible for the efficient and effective management of data assets as well as designing and implementing data management strategy and processes related to acquiring, organizing, storing,…
Added 1 min ago
Senior Manager - BCG Vantage, Consumer Products
Boston Consulting Group
Chicago, IL
…leading-edge management consulting along with technology and design, corporate and digital ventures - and business purpose. We work in a uniquely collaborative model across the firm and…
Added 1 min ago
Creative Studio Manager
Strategic Education, Inc.
Remote, United States
If offsite or hybrid role, must have access to work in setting which enables meeting all require
Added 1 min ago
Plant Manager
New-Indy Containerboard
Ringgold, GA
The individual must have a working knowledge of the following:
Added 1 min ago
Materials Manager
Piston Automotive
Auburn Hills, MI
o Establish and validate material master data, storage locations, inventory attributes, transaction rules, user access, system interfaces, and exception-management controls.
Added 2 mins ago
ZH
Salesforce Development Manager
Zing Health Holdings Inc
IL
- $120,000 to $130,000 USD / year
2+ years as a lead developer or technical lead, guiding other developers through code review and design.
Added 2 mins ago
Mechanical Engineer
Actalent
Pocasset, MA
…intended throughout their lifecycle. You will contribute to the design, integration, testing, and continuous improvement of autonomous systems and oceanographic products while collaborating…
Added 2 mins ago
A
Thermal Test Engineer
Actalent
Fremont, CA
- $45 to $59 USD / hour
…production to future platformsand to collaborate closely with design, integration, reliability, manufacturing, and software teams. You will have the autonomy to lead test initiatives,…
Added 2 mins ago
A
Realty Technician
Actalent
Kalispell, MT
- $26 to $31 USD / hour
…the file when case is complete. Verify and enter necessary data into LIS (Land Information System). (All case files are reviewed by Realty Tech IVs before auditing for accuracy/correction…
Added 2 mins ago
Sr. Global Supply Manager
Amazon Data Services, Inc.
Bellevue, WA
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all…
Added 2 mins ago
Salesforce Engineer , Amazon Leo Government
KGS LLC
Bellevue, WA
Solution Architecture and Design: Partner with product managers and business stakeholders to design and architect scalable Salesforce solutions supporting ALG Lead, Account, Contact, and…

Closed listing

Senior Identity & Access Management Engineer

Chanhassen, MN, United States

Pay This is a salaried position starting at $118,000.00(or applicable minimum salary, if higher) and pays up to $163,000.00, based on experience and qualifications.

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Job details

Pay: Pay This is a salaried position starting at $118,000.00(or applicable minimum salary, if higher) and pays up to $163,000.00, based on experience and qualifications.
Experience: 7+ years of experience in Identity & Access Management or related Information Security roles
Posting language: English
Posted: Nov 13, 2026

Similar jobs hiring now

Search current openings

Original job description

Archived listing. The details below describe a past opening.

The Life Time Technology team is at the forefront of the evolution of Life Time into a digital-first company, transforming existing experiences and creating brand new ones both online and in our clubs. If you enjoy a fast-paced environment with the latest technologies and have a passion for health and fitness – we should meet. Work is a team effort, and we are a highly motivated, highly collaborative team; we always win or lose together. We invest in our team members and ensure they have the tools and opportunities to learn, grow and thrive. We offer an incredible benefits package, generous club discounts, and a fully subsidized Signature Life Time Membership. Want to Love Your Life? Join our team.

Position Summary We are seeking a skilled Identity & Access Management (IAM) Engineer to join our Information Technology Team. In this role, you will be responsible for designing, implementing, and maintaining enterprise identity and access management solutions that protect our organization's critical resources while enabling seamless user experiences.

You will work across a modern IAM stack including cloud identity platforms, privileged access management, directory services, and email security with PingOne, PingOne DaVinci, SailPoint Identity Cloud, CyberArk Privilege Cloud, Microsoft Active Directory, Exchange On-Premises, Mimecast, Microsoft 365, and OAuth 2.0 On-Behalf-Of (OBO) token flows for API-to-API authentication. - partnering closely with IT, Security, and Business stakeholders to ensure robust, scalable, and compliant access controls.

Job Duties and Responsibilities Identity Platform Administration (SailPoint / PingOne)

Design, configure, and maintain PingOne identity platform including SSO, MFA, and user lifecycle management
Build and manage identity orchestration workflows using PingOne DaVinci, including policy-driven authentication flows and integration connectors
Integrate applications via SAML 2.0, OIDC, and OAuth 2.0 with PingOne as the Identity Provider (IdP).
Administer and extend SailPoint Identity Cloud for identity governance, access certifications, role management, and automated provisioning/deprovisioning
Define and enforce access governance policies, separation of duties (SoD) rules, and recertification campaigns across enterprise applications.
Develop connectors, workflows, rules, and reports within SailPoint to meet compliance and audit requirements (SOX, HIPAA, PCI.).
Maintain identity data integrity across connected systems and authoritative sources

Privileged Access Management (CyberArk Privilege Cloud)

Administer CyberArk Privilege Cloud to manage, monitor, and audit privileged account access
Onboard privileged accounts (Windows, Linux, network devices, databases, cloud service accounts) and enforce least privilege principles
Develop and maintain CyberArk platform policies, master policies, and credential rotation schedules.
Respond to PAM-related incidents and conduct periodic privileged access reviews
Integrate CyberArk with enterprise systems and automate credential rotation workflows

Directory Services and Active Directory

Manage and maintain Microsoft Active Directory infrastructure including forests, domains, OUs, GPOs, and trusts
Support AD health monitoring, replication, and performance tuning
Maintain and optimize Group Policy Objects (GPOs) for security hardening and compliance
Execute AD lifecycle management: user and group provisioning, access reviews, and cleanup

Email and Messaging Security (Exchange On-Premise / Mimecast)

Administer Microsoft Exchange On-Premises environments including mailbox management, transport rules, and connectors
Manage Mimecast email security including policy configuration, threat protection, and continuity services
Oversee Microsoft 365 messaging services including Exchange Online, Teams, and related workloads
Respond to email security incidents including phishing, spoofing, and mail flow issues

Microsoft 365 and Cloud Identity

Administer Microsoft 365 tenant including licensing, conditional access, and security baselines
Configure and maintain Azure AD / Entra ID integration with on-premises AD via hybrid join and sync
Implement and manage M365 security features including MFA enforcement, Privileged Identity Management (PIM), and compliance policies
Collaborate on M365 governance, data loss prevention (DLP), and access control policies

API Authentication & OAuth 2.0 On-Behalf-Of (OBO) Flows

Administer Microsoft 365 tenant including licensing, conditional access, and security baselines
Design and implement API-to-API authentication patterns using the OAuth 2.0 On-Behalf-Of (OBO) token flow - enabling services to call downstream APIs on behalf of authenticated users.
Register and manage app registrations, service principals, API permissions, and consent frameworks in Microsoft Entra ID and PingOne.
Collaborate with development teams to review token scopes, audience validation, token lifetime policies, and secure token storage practices.
Implement and enforce token validation, refresh token rotation, and mTLS certificate-bound token strategies where applicable.
Document OBO flow architectures and provide guidance on secure service mesh and microservices identity patterns.

Security, Compliance and Governance

Conduct periodic access certification campaigns and remediate inappropriate entitlements
Ensure IAM solutions comply with regulatory frameworks such as SOX, HIPAA, NIST, and ISO 27001
Document IAM processes, runbooks, and architecture decisions
Participate in security audits and support evidence collection for access-related controls
Proactively identify and remediate identity-related risks and vulnerabilities

Integration and Automation

Develop and maintain integrations between IAM platforms using REST APIs, SCIM, LDAP, and SAML
Build automation scripts (PowerShell, Python, or similar) to streamline IAM operations
Collaborate with application teams to onboard new applications to SSO and provisioning workflows

Position Requirements

7+ years of experience in Identity & Access Management or related Information Security roles
Hands-on experience with PingOne and/or PingOne DaVinci (or comparable CIAM/IDP platform)
Demonstrated experience with SailPoint IIQ or IdentityNow (governance, provisioning, certifications)
Practical knowledge of CyberArk Privilege Cloud or CyberArk PAM On-Premises
Strong proficiency in Microsoft Active Directory administration (forests, GPOs, trusts, replication)
Experience administering Microsoft Exchange On-Premises (2016/2019)
Working knowledge of Mimecast administration and policy configuration
Experience managing Microsoft 365 tenant administration and security features
Solid understanding of IAM protocols and standards: SAML, OAuth 2.0, OIDC, SCIM, LDAP
Proficiency in PowerShell scripting for automation and administration
Familiarity with identity governance concepts: RBAC, SoD, least privilege, access certifications

Preferred Qualifications

Relevant certifications such as:
Ping Identity Certified Professional
SailPoint Certified Identity Cloud
CyberArk
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
CISSP, CISM, or CompTIA Security+
Experience with Azure AD / Microsoft Entra ID in hybrid identity environments
Exposure to Privileged Identity Management (PIM) and Just-in-Time (JIT) access models
Familiarity with Zero Trust architecture principles
Experience with ITSM platforms (ServiceNow, Jira) for access request workflows
Knowledge of Python or another scripting language for IAM automation
Prior experience with identity audit support and SOX / PCI / HIPAA compliance

Pay This is a salaried position starting at $118,000.00(or applicable minimum salary, if higher) and pays up to $163,000.00, based on experience and qualifications.

Benefits

All team members receive the following benefits while working for Life Time:

A fully subsidized membership
Discounts on Life Time products and services
401(k) retirement savings plan with company discretionary match (21 years of age and older)
Training and professional development
Paid sick leave where required by law

Full-time Team Members are eligible for additional benefits, including:

Medical, dental, vision, and prescription drug coverage
Short term and long term disability insurance
Life insurance
Pre-tax flexible spending and dependent care plans
Parental leave and adoption assistance
Paid time off, including 5 to 20 vacation days per calendar year (based on tenure) and paid sick leave
Deferred compensation plan, if the team member meets the required income threshold

Life Time is a place for everyone. As an organization, we are committed to an inclusive, diverse and equitable workplace that respects and celebrates the unique contributions of each individual while ensuring we remain an equal opportunity employer that recruits, hires, trains and promotes based on merit and qualifications.

About employer

Report this job

Work requirements

Jobs in the United States