Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 107 days ago

Lead IAM Engineer

bcbsma26 open roles

Pay
$163,530 – $199,870 a year
Where
Boston
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead IAM Engineerbcbsma · Boston

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on bcbsma's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. bcbsma postings stay open a median of 10 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 107 days ago

bcbsma median: 10 days open

The posting

Ready to help us transform healthcare? Bring your true colors to blue.

We are seeking a highly experienced Lead IAM Engineer to serve as the senior technical authority for enterprise Identity and Access Management. This role will lead the design, engineering, automation, and operational maturity of IAM capabilities across workforce, privileged, machine, application, and cloud identities.

The ideal candidate combines deep technical expertise with architectural thinking and hands-on engineering execution. This individual will drive modernization initiatives, mentor engineers, establish engineering standards, and partner with business and technology teams to strengthen the organization's identity security posture.

This role is eligible for our Flex persona, with candidates local to our Boston, MA or Hingham, MA offices preferred.

Your Day to Day:

  • Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
  • Build integrations between IAM platforms and enterprise applications.
  • Support onboarding applications into IAM services.
  • Create reference architectures and design patterns.
  • Review application architectures and provide IAM guidance.
  • Develop enterprise standards for authentication, authorization, and privileged access.
  • Support Zero Trust initiatives.
  • Develop automation using Python, PowerShell, Terraform, APIs, and workflow engines.
  • Act as escalation point for IAM production issues.
  • Lead troubleshooting of complex authentication and provisioning failures.
  • Perform root cause analysis and remediation.
  • Improve platform resiliency and automation.
  • Mentor IAM engineers and administrators.
  • Conduct design reviews and code reviews.
  • Establish engineering standards and best practices.
  • Guide teams on IAM implementation patterns.
  • Support audits and compliance initiatives.
  • Assist with risk remediation efforts.
  • Evaluate emerging IAM technologies and develop IAM roadmaps
  • Identify automation opportunities and drive modernization efforts.

This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Employees may be required to perform other job-related duties.

We’re Looking for Someone Who:

  • Acts as the principal technical expert and subject matter expert for the IAM engineering team.
  • Leads the technical design and hands-on implementation of identity solutions across SSO, MFA, IGA, and PAM platforms.
  • Drives the technical execution of Zero Trust architecture and the integration of identity controls directly into CI/CD pipelines (DevSecOps).
  • Secures complex federated identities, APIs, and non-human workload identities across multi-cloud environments (AWS, Azure, GCP).
  • Provides formal mentorship, technical oversight, and architectural guidance to all other IAM engineers on the team.
  • Leads the engineering response to critical identity platform outages, performing deep root cause analysis on systemic bugs and performance issues.
  • Demonstrates Influence and Business Skills by serving as the principal technical expert, driving complex architectural decisions, and leading advanced identity methodologies without carrying direct people-management responsibilities.
  • Establishes and evangelizes IAM engineering best practices, including secure coding standards, design patterns, and reusable automation libraries

What You Bring:

  • Bachelor’s in CS/Engineering preferred, with 8+ years of dedicated IAM engineering experience.
  • Demonstrated experience leading complex IAM initiatives supporting hybrid, multi-cloud, and SaaS environments.
  • Expert-level knowledge of modern identity protocols (SAML, OAuth 2.0, OpenID Connect).
  • Advanced, hands-on experience engineering leading platforms (e.g., Ping, Delinea, SailPoint, Entra ID) for enterprise-wide scale.
  • Deep expertise in automating Identity Governance (JML processes) and deploying modern PAM controls (credential vaulting, Just-in-Time access).
  • Strong proficiency in scripting/automation (Python, PowerShell, Terraform).
  • Relevant industry certifications (e.g., CISSP, CISM, CCSP, or vendor-specific IAM certs) are strongly preferred

Minimum Education Requirements:

High school degree or equivalent required unless otherwise noted above

Location

Boston

Time Type

Full time

Salary Range: $163,530.00 - $199,870.00

The job posting range is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the salary range will be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, performance, shift, travel requirements, sales or revenue-based metrics, and business or organizational needs and affordability.

This job is also eligible for variable pay.

We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance, 401(k), and a suite of well-being benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

WHY Blue Cross Blue Shield of MA?

We understand that the confidence gap and imposter syndrome can prevent amazing candidates coming our way, so please don’t hesitate to apply. We’d love to hear from you. You might be just what we need for this role or possibly another one at Blue Cross Blue Shield of MA. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be brilliant. We encourage you to bring us your true colors, , your perspectives, and your experiences. It’s in our differences that we will remain relentless in our pursuit to transform healthcare for ALL.

As an employer, we are committed to investing in your development and providing the necessary resources to enable your success. Learn how we are dedicated to creating an inclusive and rewarding workplace that promotes excellence and provides opportunities for employees to forge their unique career path by visiting our Company Culture page. If this sounds like something you’d like to be a part of, we’d love to hear from you. You can also join our Talent Community to stay “in the know” on all things Blue.

At Blue Cross Blue Shield of Massachusetts, we believe in wellness and that work/life balance is a key part of associate wellbeing. For more information on how we work and support that work/life balance visit our "How We Work" Page.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against bcbsma's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on bcbsma's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    bcbsma's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.