<p>Your future role at a glance</p> <p>Location: Remote</p> <p>Department: Technology</p> <p>Schedule: Day shift l Full-time</p> <p>Salary range: $100,218.00 - $130,698.00 per year</p> <p>#LI-Remote</p> <p>#LI-CL2</p> <p>Life at Ascension: Where purpose meets opportunity</p> <p>Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 99,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you'll find an inclusive and supportive environment where your contributions truly matter.</p> <p>Benefits that help you thrive</p> <ul> <li>Comprehensive health coverage: medical, dental, vision, prescription coverage and HSA/FSA options </li><li>Financial security & retirement: employer-matched 403(b), planning and hardship resources, disability and life insurance </li><li>Time to recharge: pro-rated paid time off (PTO) and holidays </li><li>Career growth: Ascension-paid tuition (Vocare), reimbursement, ongoing professional development and online learning </li><li>Emotional well-being: Employee Assistance Program, counseling and peer support, spiritual care and stress management resources </li><li>Family support: parental leave, adoption assistance and family benefits </li><li>Other benefits: optional legal and pet insurance, transportation savings and more </li></ul> <p>Benefit options and eligibility vary by position, scheduled hours and location. Benefits are subject to change at any time. Your recruiter will provide the most up-to-date details during the hiring process.</p> <p>How you'll make an impact in this role</p> <ul> <li> <p>Architect Multi-Cloud IAM Frameworks: Engineer and maintain scalable Identity and Access Management (IAM) architectures across OCI, Azure, GCP, and AWS, translating complex business security requirements into technical specifications aligned with the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, Recover).</p> </li><li> <p>OCI Security Orchestration: Execute deep-tier technical implementation within Oracle Cloud Infrastructure, including the design of granular policy syntax, hierarchical compartment structures for resource isolation, and the management of OCI Identity Domains to enforce strict least-privilege access.</p> </li><li> <p>Infrastructure as Code (IaC) & Automation: Develop and deploy IAM configurations using Terraform and OCI Resource Manager, leveraging OCI CLI and SDKs to automate identity lifecycle management, resource provisioning, and security posture enforcement.</p> </li><li> <p>Identity Federation & Protocols: Configure and troubleshoot complex cross-platform integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) to federate OCI with external providers such as Okta, Azure AD, and LDAP-based directory services for seamless SSO.</p> </li><li> <p>Advanced Security Integration: Synthesize IAM workflows with OCI Vault for secrets management and Cloud Guard/Security Zones to automate threat detection and maintain continuous compliance across a distributed multi-cloud environment.</p> </li></ul> <p>What minimum requirements you'll need</p> <p>Education:</p> <ul> <li>High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required. </li></ul> <p>What additional preferences we're seeking</p> <ul> <li> <p>Advanced OCI Certification: Possession of Oracle Cloud Infrastructure Security Professional or Architect Professional certifications.</p> </li><li> <p>Cross-Platform Competency: Hands-on experience managing Azure Managed Identities, AWS IAM Roles, and GCP Workload Identity Federation in a unified environment.</p> </li><li> <p>Security Scripting: Proficiency in Python or Go for developing custom security tooling and enhancing automated "Self-Healing" IAM remediation scripts.</p> </li></ul> <p>Equal employment opportunity employer</p> <p>Ascension provides Equal Employment Opportunities (EEO) to all associates and applicants for employment without regard to race, color, religion, sex/gender, sexual orientation, gender identity or expression, pregnancy, childbirth, and related medical conditions, lactation, breastfeeding, national origin, citizenship, age, disability, genetic information, veteran status, marital status, all as defined by applicable law, and any other legally protected status or characteristic in accordance with applicable federal, state and local laws. For further information, view the EEO Know Your Rights (English) poster or EEO Know Your Rights (Spanish) poster.</p> <p>Fraud prevention notice</p> <p>Prospective applicants should be vigilant against fraudulent job offers and interview requests. Scammers may use sophisticated tactics to impersonate Ascension employees. To ensure your safety, please remember: Ascension will never ask for payment or to provide banking or financial information as part of the job application or hiring process. Our legitimate email communications will always come from an @ascension.org email address; do not trust other domains, and an official offer will only be extended to candidates who have completed a job application through our authorized applicant tracking system.</p> <p>E-Verify statement</p> <p>Employer participates in the Electronic Employment Verification Program. Please click here for more information.</p>