Jobs › Centene

Senior IAM Engineer

Centene · MO · Remote available · $87,000–$161,300 a year · Full time

Posted Sep 9, 2026 · We last checked this listing on Oct 6, 2026

Apply at Centene

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a time you had to read and fix someone else's integration code in an IAM platform.

What they are checking: Whether they can work safely in existing code instead of only configuring through screens.

Tell me about a time you were the escalation point for a hard IAM problem. How did you approach it?

What they are checking: Whether they can lead other engineers through complex issues and share what they learn.

What would you do

Users are getting the wrong roles after a provisioning change. How do you troubleshoot it?

What they are checking: Whether they have a methodical approach to tracing access issues through rules, data and logs.

How do you bring privileged access management to a team that is used to shared admin accounts?

What they are checking: Whether they can roll out PAM controls while keeping operations teams productive and on board.

Where do you think IAM architecture should head in the next few years for an organization like this?

What they are checking: Whether they can contribute to future-state planning with practical ideas, not just buzzwords.

About the work

Walk me through how you would design joiner, mover and leaver automation for a large enterprise.

What they are checking: Whether they understand identity lifecycle end to end, including the mover case that often leaves excess access.

How have you used BeanShell, Java or Python to build a connector or workflow in an identity governance tool?

What they are checking: Whether they have real hands-on development depth in the languages this role names.

How would you design RBAC so it does not explode into thousands of roles?

What they are checking: Whether they understand role engineering and can balance least privilege against manageability.

What makes an access certification campaign meaningful instead of a rubber stamp?

What they are checking: Whether they know how to design reviews that managers will take seriously and auditors will trust.

Explain how SAML and OIDC differ, and when you would choose one over the other for SSO.

What they are checking: Whether they understand federation protocols well enough to lead application integrations.

How do you test IAM code changes safely before they touch production identities?

What they are checking: Whether they use version control, test environments and rollback plans when changes can lock people out.

What regulatory requirements in healthcare shape how you design identity controls?

What they are checking: Whether they understand HIPAA and audit expectations around who can see member data.

Practice this interview out loud.

Offer builds a real interview for this exact role at Centene from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Centene.

Position Purpose: The Senior IAM Engineer designs, develops, implements, and supports enterprise Identity and Access Management solutions. This role operates as an independent technical expert and combines strong IAM engineering depth with a developer mindset. The engineer must be able to understand existing code, troubleshoot complex behavior, modify and test code safely, and build scalable solutions that meet business, security, and regulatory needs. The role leads technical integrations, serves as an escalation point for other engineers, and contributes to future-state IAM architecture and roadmap planning. Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT. • Design, develop, configure, test, implement, and support advanced IAM capabilities, including identity lifecycle management, identity governance, provisioning, SSO, MFA, PAM, RBAC, access certification, and policy enforcement. • Read, analyze, troubleshoot, and modify application or integration code; develop scripts, APIs, connectors, workflows, and automation using languages and tools such as Java, BeanShell, Python, PowerShell, REST APIs, JSON, XML, SQL, and Git-based version control. • Lead technical integrations between IAM platforms and enterprise applications, directories, cloud services, infrastructure, and security tools. • Diagnose and resolve complex, non-standard IAM engineering issues across code, configuration, data, APIs, connectors, workflows, and dependent systems. • Create and enforce IAM engineering standards, technical procedures, deployment practices, and controls aligned with identity lifecycle management and security best practices. • Produce accurate technical requirements, solution designs, test plans, implementation plans, support documentation, and operational runbooks. • Serve as a senior escalation point and mentor current team through technical guidance, code review, troubleshooting, and hands-on problem resolution. • Partner with security architects, application owners, developers, system administrators, infrastructure teams, risk partners, and business stakeholders to deliver end-to-end IAM solutions. • Evaluate system performance, reliability, security, and supportability; recommend and implement improvements that increase delivery speed, quality, resilience, and operational efficiency. • Contribute to IAM strategy, platform roadmaps, future-state architecture, cloud IAM, Zero Trust, DevSecOps, and automation opportunities. • Ensure solutions comply with corporate policies, ethical standards, security requirements, and applicable regulatory obligations, including SOX, HIPAA, PCI-DSS, and privacy requirements. • Lead or contribute to cross-functional implementations from requirements and design through testing, deployment, stabilization, and transition to support. • Performs other duties as assigned. • Complies with all policies and standards. Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position. Technical Skills: • Required: Hands-on IAM engineering experience with SailPoint IdentityIQ or a comparable identity governance platform; Active Directory and Microsoft Entra ID; REST/SOAP APIs; scripting or software development; source control; testing; troubleshooting; and production support. • Strongly preferred: SailPoint IdentityIQ development using Java, BeanShell, connector and workflow development, Python, PowerShell, SQL, JSON/XML, CI/CD, cloud identity, Okta or Ping, CyberArk or other PAM platforms, and healthcare or highly regulated industry experience. • Demonstrated ability to work independently, balance multiple complex priorities, communicate clearly with technical and non-technical partners, make sound decisions under pressure, and deliver accurate work on schedule. Soft Skills: • Intermediate - Seeks to acquire knowledge in area of specialty. • Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions. • Intermediate - Ability to work independently. • Intermediate - Demonstrated analytical skills. • Intermediate - Demonstrated project management skills. • Intermediate - Demonstrates a high level of accuracy, even under pressure. • Intermediate - Demonstrates excellent judgment and decision making skills. License/Certification: • No certification is required. Preferred certifications include SailPoint, CyberArk, Microsoft Identity and Access Administrator, Okta, CISSP, CIAM, CIST, or CAMS. Pay Range: $87,000.00 - $161,300.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law , including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act

Apply at Centene