NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News & World Report recently placed nine of its clinical specialties among the top five in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.
For more information, go to NYU Langone Health, and interact with us on LinkedIn, Glassdoor, Indeed, Facebook, Twitter, YouTube and Instagram.
Position Summary:
We have an exciting opportunity to join our team as a Lead IAM Engineer, MCIT-Security Admin.
In this role, the experienced Lead IAM Engineer with deep expertise in designing and managing secure, scalable identity and access solutions across hybrid environments. Skilled in integrating and administering Active Directory, Microsoft Entra ID (Azure AD), AWS IAM, and GCP IAM to support modern Zero Trust architectures. Proven track record of leading enterprise IAM strategies, implementing identity lifecycle automation, enforcing the least privilege, and aligning access controls with security and compliance requirements in cloud and on-premises infrastructures.
Job Responsibilities:
Cloud Identity Engineering
Manage and maintain a unified IAM architecture by integrating Active Directory (AD), Entra ID (Azure AD), and AWS IAM to ensure consistent, secure identity and access controls across on-premises and cloud platforms.Build and maintain a centralized identity framework connecting AD, Entra ID, and AWS IAM and GCP to protect sensitive healthcare data and streamline secure access across cloud and on-prem systems.Define and enforce enterprise identity standards, including naming conventions, group structures, RBAC policies, and lifecycle automation.Lead the adoption of Zero Trust principles and modern identity-centric security models by implementing secure IAM frameworks in AWS and GCPincluding roles, policies, SCPs, and federationwhile supporting vulnerability management efforts through alignment of access controls with cloud security findings.Collaborate with DevOps and cloud teams to ensure least privilege, access auditing, and just-in-time access models across Multi Cloud resources.Microsoft Identity Management
Administer and optimize on-prem Active Directory, including domain trusts, Sites and Services, GPOs, OU structure, and replication.Design and enforce Entra ID Conditional Access policies, MFA (DUO, MS), risk-based authentication, and device trust.Lead integration of Entra ID with key business and clinical systems. Implement and manage access certification processes, audit trails, and automated entitlement reviews aligned with HIPAA frameworks.Lead response efforts for IAM-related audit findings, penetration tests, and security assessments.Develop scripts and tools (PowerShell, Python, or Terraform) to automate user provisioning, de-provisioning, and group management across systems.Act as the subject matter expert (SME) for IAM technologies and processes.Mentor other engineers and contribute to cross-functional initiatives across IT security, clinical systems, cloud infrastructure, and compliance teams.Minimum Qualifications:
To qualify you must have a Typically requires 7 or more years of experience and BA/BS degree.
Preferred Qualifications:
Experience with Privileged Access Management (PAM) tools (e.g., CyberArk, BeyondTrust).
Familiarity with Terraform, CloudFormation, or similar infrastructure-as-code tools for identity resource management.
Preferred experience with Identity Governance and Administration (IGA) solutions such as SailPoint
Cloud certifications such as:
o Microsoft Certified: Identity and Access Administrator Associate
o AWS Certified Security Specialty
o GCP Cloud Security Engineer
Qualified candidates must be able to effectively communicate with all levels of the organization.
NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.
At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement. The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time-off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters. Join us and experience the extensive resources and services designed to enhance your overall quality of life for you and your family.
NYU Langone Health is an equal opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online.
View Know Your Rights: Workplace discrimination is illegal.
NYU Langone Health provides a salary range to comply with the New York state Law on Salary Transparency in Job Advertisements. The salary range for the role is $97,589.95 - $150,000.00 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits.
To view the Pay Transparency Notice, please click here