Principal IAM Engineer

Join Lantern, a specialty care platform revolutionizing healthcare access. As a Principal IAM Engineer, you'll be the technical authority for identity management, ensuring secure access to protected health information (PHI). You'll set identity standards, build automation, and verify compliance. This hands-on role offers a clear path to leadership as the identity function grows. Enjoy a range of benefits, including paid vacation, health insurance, and a retirement savings plan.

• Own the identity lifecycle, including provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC).
• Set the identity standard, build the automation behind it, and hold the verification bar that other teams operate against.
• Act as the technical authority for identity, determining who can reach protected health information (PHI) and under what conditions.

• Bachelor’s degree in a relevant field, or equivalent professional experience
• Identity-as-code and policy-as-code practice, using Terraform with source-controlled change management (for example, GitHub)
• Identity governance and administration (IGA) platform engineering, including privileged access management
• Secrets and non-human identity (API keys, service accounts, workload identity), and maintaining an owner registry for them
• Automation and scripting (PowerShell, Python, or similar) to build lifecycle workflows and custom connectors
• Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory
• The ability to act as the technical authority for a function without formal people-management authority, working directly to a CISO
• Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls
• Key access governance and separation of duties in a model where another team operates the key management system
• Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2, and verifying that enforcement takes effect across every access path, not only the expected one
• A minimum of 8 years in identity and access management, including principal- or staff-level ownership of an identity control plane
• Healthcare or another regulated environment where identity controls gate access to PHI
• Experience growing a technical scope into a broader leadership remit
• Experience remediating a Conditional Access enforcement gap or a deprovisioning failure, and making the structural change that prevented recurrence
• Automation bias. You remove the manual step rather than documenting it more carefully
• Verified enforcement. You do not consider a control done until you have seen it working on every path
• Governance respect. You keep access certification independent rather than absorbing it
• Structural fixes. You solve the class of failure, not the instance
• Boundary clarity. You hold the standard with partner teams without taking over their execution
• You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren’t just the individuals using your product. They are the driving factor in your motivation to make a change
• These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources, and support they need to get back to life
• You thrive in a Team Environment. Collaboration is key in innovation and creating change
• INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with
• Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear
• You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas
• You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins
• Hands-on Saviynt with PAM, Azure PIM, and Keeper, or transferable depth in comparable platforms
• Microsoft Identity and Access Administrator certification, CIMP, or equivalent
• Passkeys and FIDO2, or phishing-resistant authenticator experience, aligned with NIST SP 800-63 Rev. 4