Senior Active Directory / IAM Engineer - Remote

May 14, 2026 Auto Import

Join the transformative team at <a href="https://www.cityofhope.org/about-city-of-hope" target="_blank" rel="noopener">City of Hope</a>, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today. <p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px="" 0px="" 12px;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">** This is a Fully Remote Opportunity within the United States**<p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0px="" 0px="" 0in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">As a successful candidate, you will:<p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px="" 0px="" 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">City of Hope is seeking an experienced and strategic-minded Senior Identity and Access Management / Active Director Engineer to join our Information Technology team. This individual will lead the design, implementation, and ongoing management of our hybrid identity infrastructure—including on-premises Active Directory and Entra ID (formerly Azure AD)—to ensure secure, efficient, and scalable access to enterprise systems.<p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px="" 0px="" 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">The Senior IAM / Active Directory Engineer will collaborate with cross-functional teams and regularly present technical strategies, risks, and performance metrics to executive leadership. This position plays a critical role in advancing City of Hope’s security posture through innovation, standardization, and continuous improvement in identity and access management practices.<p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0in="" 0in="" 0.25in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">IAM Solution Design and Implementation:<ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Design, implement, and maintain IAM solutions to manage user identities, access privileges, and authentication mechanisms.</li><li class="MsoNormal" style="line-height:normal;">Collaborate with stakeholders to gather requirements and ensure that IAM solutions align with business needs.</li></ul><p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0in="" 0in="" 0.25in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">System Integration and Optimization:<ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Integrate IAM solutions with existing systems, applications, and directory services.</li><li class="MsoNormal" style="line-height:normal;">Optimize IAM workflows and processes to enhance efficiency and user experience.</li></ul><p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0in="" 0in="" 0.25in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">Access Control and Authorization:<ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Implement and manage role-based access controls (RBAC) to ensure that users have appropriate access permissions.</li><li class="MsoNormal" style="line-height:normal;">Conduct regular access reviews and audits to maintain a secure access environment.</li></ul><p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0in="" 0in="" 0.25in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">Authentication and Federation:<ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Evaluate, implement, and manage authentication mechanisms, including multi-factor authentication (MFA).</li><li class="MsoNormal" style="line-height:normal;">Implement and maintain identity federation solutions for seamless and secure access across systems.</li></ul><p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;line-height:normal;margin:0in="" 0in="" 0.25in;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"="">Incident Response and Troubleshooting:<ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Participate in incident response activities related to IAM, investigating and resolving security incidents.</li><li class="MsoNormal" style="line-height:normal;">Troubleshoot and resolve IAM-related issues in a timely manner.</li></ul><p class="MsoNormal" style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px="" 0px="" 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""> <ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoNormal" style="line-height:normal;">Lead the administration, maintenance, and optimization of Microsoft Active Directory, including Group Policy Objects (GPOs), OU structures, trusts, and replication.</li><li class="MsoNormal" style="line-height:normal;">Design, implement, and manage hybrid identity solutions between on-prem Active Directory and Entra ID (Azure AD).</li><li class="MsoNormal" style="line-height:normal;">Maintain and enhance identity lifecycle processes (provisioning, deprovisioning, role-based access control) for both cloud and on-prem environments.</li><li class="MsoNormal" style="line-height:normal;">Manage synchronization and federation services such as Azure AD Connect, ADFS, or Entra Connect Cloud Sync.</li><li class="MsoNormal" style="line-height:normal;">Enforce identity governance policies including conditional access, MFA, and privileged access management in Entra ID.</li><li class="MsoNormal" style="line-height:normal;">Monitor and troubleshoot authentication and authorization issues across Active Directory and Entra services.</li><li class="MsoNormal" style="line-height:normal;">Develop and maintain automation scripts (e.g., PowerShell) to support IAM tasks and improve operational efficiency.</li><li class="MsoNormal" style="line-height:normal;">Support audits and ensure compliance with security standards such as NIST, HIPAA, or ISO 27001 by maintaining clean identity records and access logs.</li><li class="MsoNormal" style="line-height:normal;">Partner with cybersecurity, infrastructure, and application teams to integrate IAM services with enterprise platforms.</li></ul> Your qualifications should include: <ul style="-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:" open="" sans",="" "segoe="" ui",="" frutiger,="" "frutiger="" linotype",="" "dejavu="" "helvetica="" neue",="" arial,="" sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:12px="" 0px;orphans:2;padding:revert;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"=""><li class="MsoListParagraphCxSpFirst" style="line-height:normal;">Bachelor’s degree in related field; 4 additional years of experience plus the minimum experience requirement may substitute for minimum education</li><li class="MsoListParagraphCxSpMiddle" style="line-height:normal;">Seven or more years in a technology related field, with a minimum of 5 years in Identity and Access Management specific experience. Hospital/healthcare industry experience is desirable, but not required.</li><li class="MsoListParagraphCxSpMiddle" style="line-height:normal;">Working knowledge of Information Security tools, practices, policies and processes in a multi-vendor environment with an emphasis on risk analysis, risk assessment and risk management.</li><li class="MsoListParagraphCxSpLast" style="line-height:normal;">Management/Computer Information Systems (MIS/CIS), Computer/Electrical Engineering, Computer Science or related field</li></ul>City of Hope employees pay is based on the following criteria: work experience, qualifications, and work location.City of Hope is an equal opportunity employer. To learn more about our commitment to diversity, equity, and inclusion, please <a href="https://www.cityofhope.org/careers/diversity-equity-inclusion" target="_blank" rel="noopener">click here</a>.To learn more about our Comprehensive Benefits, please <a href="https://www.cityofhope.org/careers/wellness-and-benefits/benefits" target="_blank" rel="noopener">CLICK HERE</a>.

Back to blog