Garner’s mission is to transform the healthcare economy, delivering high-quality and affordable care for all.
We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures.
Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale.
About the role:
The IT IAM and Automation Engineer is a highly technical individual contributor responsible for architecting, automating, and scaling the internal systems that power Garner. This role treats Internal Corporate IT Engineering as infrastructure — designing durable identity systems, enterprise workflow automation, AI-enabled operations, and security process automation within a high-compliance healthcare environment.
You will lead high-impact initiatives across identity architecture, RBAC automation, infrastructure-as-code adoption, internal tooling, AI enablement, and Security Operations automation. You will partner closely with Security, Engineering, and Operations to reduce operational fragility and replace manual processes with scalable, version-controlled systems.
This role demands strong systems thinking, hands-on engineering ability, and an owner mindset.
Where you will work:
This role will be based in our New York City office. You must be willing to work in the office 3 days per week on Tuesday, Wednesday and Thursday.
What you will do:
- Architect and implement scalable identity and access systems (SSO, SCIM, RBAC, attribute-based access, device trust).
- Design and automate complex user lifecycle workflows integrating HRIS, IdP, SaaS applications, and cloud environments.
- Implement and expand infrastructure-as-code practices (e.g., Terraform) to manage identity, SaaS configuration, and cloud resources in a version-controlled, auditable manner.
- Build enterprise workflow automation across onboarding, offboarding, procurement, service intake, and cross-functional business processes.
- Develop API-driven integrations and internal tooling using platforms such as Retool, Okta Workflows, and other automation frameworks.
- Lead AI enablement initiatives across IT and operational workflows, including intelligent service routing, incident triage, knowledge retrieval, and support automation.
- Partner with Security to design and automate Security Operations processes using platforms such as Tines and related tooling.
- Build automation that enforces least-privilege access, continuous auditability, and control monitoring aligned with HIPAA, HITRUST, and SOC2 requirements.
- Contribute to SaaS and cloud governance by integrating identity controls and automation across AWS and GCP environments.
- Serve as a senior escalation point within your domain, helping evolve systems rather than perpetuate manual operations.
The ideal candidate has:
- 4–7+ years of experience in enterprise IT, IAM, cloud, platform, or security automation roles.
- Deep expertise in Identity & Access Management (Okta strongly preferred), including SAML, OIDC, SCIM, OAuth, group automation, and lifecycle design.
- Strong experience building automation using APIs.
- Meaningful experience with infrastructure-as-code tools (Terraform strongly preferred) for managing cloud, identity, or SaaS resources.
- Strong scripting or programming proficiency (Python, Go, Node.js, Ruby, PowerShell, or similar).
- Experience designing secure RBAC models and least-privilege architectures in high-scale environments.
- Exposure to Security Operations automation or SOAR platforms (e.g., Tines) preferred.
- Experience integrating or evaluating AI/LLM-enabled tooling in operational workflows.
- Strong systems thinking ability — capable of decomposing ambiguous, cross-functional workflows into scalable architectures.
- Experience operating in high-compliance environments (HIPAA, HITRUST, SOC2) preferred.
- Familiarity with ITIL processes and ITSM tooling (FreshService or similar).
- Familiarity with BPMN or similar visual workflow documentation language
Technologies we use:
-
Okta, Okta Workflows, Retool, FreshService (ITSM), Google Workspace, Slack, Atlassian (Confluence and Jira), MDM platforms (Jamf Pro, Kandji/Iru, Intune), Airtable, AWS and GCP, Terraform, Rippling (HRIS), SOAR (Tines), and AI-enabled operational tooling (Claude, Gemini, Rovo)
This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare.
Compensation Transparency:
The target salary range for this position is $153,000 - $190,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more.
Fraud and Security Notice:
Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com.
Equal Employment Opportunity:
Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.
