IAM Manager - Engineering

Thank you for considering a career at Ensemble! Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country. Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference! O.N.E Purpose: Customer Obsession:  Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations. Embracing New Ideas:  Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation. Striving for Excellence:  Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results. The Opportunity: Manager, IAM Engineering & New Client Provisioning Ensemble Health Partners | Identity & Access Management | Technology Security Position Summary The Manager, IAM Engineering & Client Provisioning is an Ensemble Health Partners Technology Security leadership role responsible for unifying IAM platform engineering with client access provisioning operations. This leader ensures Ensemble has secure, compliant, scalable, and measurable identity services across enterprise and client environments, with clear ownership for SailPoint/IGA maturity, lifecycle automation, ServiceNow intake, client provisioning readiness, SLA performance, escalation management, audit evidence, and operational improvements. This role is designed to support Ensemble’s IAM transformation priorities: standardizing provisioning processes, expanding automation, improving client onboarding readiness, strengthening governance, and giving leadership reliable visibility into IAM service performance. Strategic Purpose for Ensemble This role provides the leadership bridge between strategic IAM engineering and operational access delivery. The position is accountable for ensuring that identity platforms, intake workflows, provisioning standards, and client onboarding processes work together as one integrated service model. Improve consistency across client provisioning models and reduce one-off access fulfillment processes. Advance automation for joiner, mover, leaver, transfer, rehire, contractor, and termination workflows. Strengthen audit readiness through standardized evidence, entitlement reconciliation, and access governance support. Increase leadership visibility through dashboards, SLA trends, backlog reporting, and risk-based recommendations. Protect Ensemble and client operations by improving access accuracy, timeliness, least-privilege alignment, and escalation discipline. Primary Responsibilities IAM Engineering Leadership Lead engineering ownership and operational support of IAM platforms, including SailPoint/IGA, directory services, cloud identity, access request workflows, lifecycle automation, and related identity technologies. Develop and execute the IAM engineering roadmap aligned to Ensemble’s security, automation, client onboarding, compliance, and operational efficiency goals. Oversee design, configuration, testing, deployment, support, and continuous improvement of identity profiles, lifecycle states, roles, access profiles, entitlements, connectors, workflows, transforms, provisioning logic, and reporting. Establish and maintain technical standards, runbooks, SOPs, configuration documentation, support playbooks, and operational readiness practices. Ensure IAM platforms are reliable, scalable, secure, auditable, and aligned to Technology Security architecture and operational expectations. Identity Lifecycle & Automation Lead engineering standards for joiner, mover, leaver, transfer, rehire, leave, contractor, and termination workflows. Partner with HR/HCM, ServiceNow, directory, cloud, application, and client-facing teams to improve authoritative data quality, lifecycle triggers, access accuracy, and deprovisioning timeliness. Drive automation opportunities that reduce manual work, improve SLA performance, strengthen controls, and create measurable time and cost savings. Advance role-based access control, standard entitlement models, identity governance maturity, and reusable patterns across enterprise and client access environments. Maintain an automation and technical debt backlog with owners, business value, risk impact, and target delivery milestones. Client Onboarding & Readiness Partner with Implementation, Client Success, Operations, Application Owners, and client stakeholders to define access requirements early in the client onboarding lifecycle. Ensure client provisioning requirements, entitlement files, role mappings, access dependencies, test users, escalation contacts, and go-live readiness criteria are documented and tracked. Support readiness checkpoints and post-go-live stabilization activities to reduce access delays, rework, and operational disruption. Identify client-specific process variation and lead standardization opportunities that can scale across Ensemble’s client portfolio. Escalate readiness risks with clear business impact, ownership, resolution path, and decision requirements. documented, time-bound, assigned to owners, and communicated with appropriate leadership visibility. Governance, Risk & Compliance Ensure IAM engineering and provisioning processes support Ensemble audit, regulatory, security, and internal control expectations. Partner with GRC, Internal Audit, Cybersecurity, application owners, and client stakeholders to support access reviews, audit evidence, entitlement reco