Identity and Access Management (IAM) SailPoint Administrator

The IAM SailPoint Administrator is responsible for the day-to-day administration, configuration, and operational support of Cook County Health’s Identity Governance & Administration platforms, including SailPoint Identity Security Cloud (ISC) and Non-Employee Risk Management (NERM).

This role ensures secure, compliant, and efficient identity lifecycle operations by managing provisioning workflows, entitlement governance, certification campaigns, and user-access-level directory operations. The role partners with IAM leadership, HRIS, IT, and application owners to maintain accurate identity data, streamline access processes, and support IAM modernization in alignment with HIPAA, NIST, Zero Trust, and internal governance requirements.

Minimum Qualifications

• Strong understanding of IGA methodologies and IAM best practices.
• High attention to detail and data accuracy.
• Ability to manage multiple priorities in a fast-paced environment.
• Clear and professional communication skills.
• Commitment to secure, compliant, and efficient identity operations.
• Collaborative mindset with cross-functional teams.
• Ability to explain IAM concepts to technical and non-technical individuals.

Preferred Qualifications

• SailPoint Identity Security Administrator certification.
• Experience with Cerner, Epic, or other EMR identity models.
• Experience with cloud identity platforms such as Entra ID, AWS IAM, or GCP IAM.
• Experience with PowerShell for light operational automation.
• Experience with Postman.
• Familiarity with HIPAA and HITECH requirements.
• Experience supporting identity operations in regulated industries.

Knowledge, Skills, and Abilities

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3–5+ years of experience supporting IAM or IGA platforms.
• Hands-on experience with SailPoint Identity Security Cloud and NERM.
• Strong understanding of identity lifecycle management, RBAC/ABAC, SoD, and access governance.
• Experience with Active Directory, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS systems.
• Strong analytical and troubleshooting skills.
• Ability to work in a complex, unionized healthcare environment.

Responsibilities

• Administer and maintain SailPoint ISC configurations, including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle Event triggers.
• Configure and support provisioning workflows, approval chains, and automated Joiner–Mover–Leaver lifecycle events.
• Develop and maintain SailPoint Rules for provisioning, aggregation, and correlation.
• Maintain identity attribute mappings, correlation logic, authoritative source configurations, and identity data quality.
• Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
• Support connectors for Active Directory, Entra ID, Epic, FreshService, HRIS, and other enterprise applications.
• Maintain documentation for configurations, workflows, and operational procedures.