Principal Engineer, Identity & Access Management

Innovation starts from the heart. At Edwards Lifesciences, we’re dedicated to developing ground-breaking technologies with a genuine impact on patients’ lives. At the core of this commitment is our investment in cutting-edge information technology. This supports our innovation and collaboration on a global scale, enabling our diverse teams to optimize both efficiency and success. As part of our IT team, your expertise and commitment will help facilitate our patient-focused mission by developing and enhancing technological solutions.

In this role you will lead and contribute to the engineering, operations and maintenance of Identity and Access Management services and related security technologies, including SSO/federation, MFA, identity governance, and privileged access management. Ideal candidates possess both broad and deep technical knowledge in Information Security and IAM practice, bringing an engineering mindset to build identity processes and hardening access controls. This is a highly collaborative role, and you will work in close collaboration with multiple cross-functional teams to deliver secure, seamless, and compliant access experiences.

How you´ll make an impact:

Lead IAM platform and/or systems evaluation testing/proof of concepts; Lead maintenance and upgrade activities on IAM infrastructure and/or applications.

Lead the evaluation and recommendation of new product and/or service offerings, and serve as a technical lead on implementation including performing vendor management functions

Serve as the technical lead in the design and build of IAM systems (e.g., SSO/federation, Identity Governance & Administration (IGA), Privileged Access Management (PAM), directory services, MFA, provisioning/lifecycle management)

Lead RASP initiatives (reliability, availability, scalability and performance) across IAM services

Resolve problems by performing root cause analysis and developing and lead the implementation of corrective and preventative actions

Provide technical expertise and business requirements gathering sessions through interfacing with members of the business

Author identity, access and/or systems diagrams, including configuration parameters and access control policies

Provide training, coaching and knowledge transfer to team members

Provide support and troubleshooting of issues/incidents

What are we looking for (Required):

Bachelor’s degree in computer science, or IT related fields.

6 years of experience in one of the following three areas, as appropriate for the position: Identity Governance & Administration, Privileged Access Management, or Access Management/Federation.

What else we look for (Preferred):

Extensive knowledge of IAM technologies (e.g. configuring SSO/SAML/OIDC, RBAC/ABAC, MFA, directory services such as Active Directory and Entra ID, Auth0, Okta, LDAP, PKI (ADCS), certificate management, access recertification, and privileged credential vaulting.

Working knowledge of IAM services of any public cloud providers (Azure, AWS, GCP), is a plus.

Professional certifications (e.g., CISSP, Okta, Entra ID or CyberArk) strongly preferred

Excellent problem-solving skills

Excellent understanding of troubleshooting techniques with the ability to adapt and learn new technologies

Excellent organization and time management skills

Excellent verbal and written communication skills and customer focused skills

Experience drafting technical documentation

Extensive knowledge and understanding of optimizing technical solutions across multiple technologies, working closely with the vendors and in-house Architects to design, test and implement strategic solutions

Extensive documentation and troubleshooting skills

Extensive knowledge of identity lifecycle management or access configuration

Strict attention to detail

Ability to manage competing priorities in a fast-paced environment