The Identity and Access Management team is responsible for designing, engineering, and operating enterprise identity services that enable secure, scalable, and seamless access across Stellarus’ technology ecosystem. The team drives Identity Lifecycle Management, Identity Governance, Privileged Access Management, authentication, authorization, automation, and Zero Trust capabilities while partnering across the enterprise to support digital transformation, regulatory compliance, secure software delivery, and responsible AI adoption.
The Senior Manager, Identity Platform Engineering will report to the Sr.
Director, Identity & Access Management.
In this role, you will help shape the future of Stellarus’ identity platform by engineering secure, automated, and scalable IAM capabilities that support hybrid cloud, SaaS, on-premises, application, privileged, service, machine, and AI-enabled access patterns.
You will partner with teams to integrate identity into modern software delivery practices, accelerate automation through DevOps and AI, and deliver programmatic identity services that can be consumed by development teams through self-service, least-privileged, time-bound, and policy-governed patterns.
Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow personally, professionally, and financially.
We are looking for leaders who are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.
Your Work
In this role, you will:
Design, implement, and continuously improve enterprise Identity and Access Management capabilities across hybrid cloud, SaaS, on-premises, application, privileged, service, machine, and AI-enabled access patterns.
Lead the engineering, automation, and modernization of Identity Lifecycle Management, Identity Governance, Privileged Access Management, authentication, authorization, federation, and access governance capabilities.
Contribute to enterprise IAM architecture, engineering standards, platform roadmaps, service reliability practices, operational metrics, risk reduction plans, and measurable outcomes that support Stellarus’ technology strategy.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
Your Role
The AI & Machine Learning team works in partnership across the enterprise to accelerate business outcomes by applying machine learning, statistical analysis, generative AI, and applied AI to build intelligent p
Your Role
The Network Performance Analysis and Contracts team focuses on provider network performance analysis, reporting, and consulting. The Data Analyst-Health, Principal role will report to the Senior Director, Provi
Your Role
The Internal Audit Services team provides independent, objective assurance and advisory services to help Blue Shield of California manage risk, strengthen internal controls, and improve business processes. The
Your Work
In this role, you will:
Actively learning the core principles of decision analytics with knowledge of the analytic tools and techniques that are used to acquire and analyze data for reporting and decision makin
Your Role
The Appeals and Grievances teams receive, document, investigate, refer, and coordinates grievances, appeals and complaints. The Appeals and Grievances Coordinator will report to the Appeals and Grievances Super
Your Role
The Government Markets Customer Experience team supports member interactions from our Government Markets members. The Director, Government Markets Customer Service will report to the Sr. Director, Government Ma
Your Role
The Clinical Quality Review (CQR) team is responsible for reviewing potential quality of care issues (PQIs) reported by a member, a member representative, or an internal or external partner. The Clinical Qualit
Pharmacy Technician, Intermediate (Short Term Employment)
Rancho Cordova, USA
Mid
Your Role
The Pharmacy Prior Authorization team provides efficient and accurate responses to external customers (physicians, office staff, pharmacy providers, members, and brokers) and internal team members for all outpa
Deliver IAM as a reusable, API-driven, developer-consumable platform that enables secure self-service application onboarding, entitlement workflows, access request automation, standardized integration patterns, reference architectures, and developer documentation.
Develop and maintain scalable identity services using Infrastructure as Code, configuration-as-code, DevOps practices, CI/CD pipelines, APIs, workflow orchestration, automated testing, policy validation, and automation frameworks to accelerate delivery and improve reliability.
Partner with teams to embed identity into enterprise platforms, cloud environments, software delivery pipelines, AI-enabled workflows, and modern application architectures.
Design and implement Role-Based Access Control, Attribute-Based Access Control, policy-based access control, Just-in-Time, just-enough, time-bound, ephemeral, and Least Privilege access models that reduce standing privilege while simplifying access administration.
Advance privileged access modernization and access governance through automated approval workflows, time-bound elevation, break-glass controls, credential rotation, session monitoring, access expiration, entitlement management, access certification, analytics, and risk-based privilege management.
Engineer integrations across identity governance, access management, privileged access, directory, cloud, HR, data, AI, and enterprise application platforms to support automated provisioning, deprovisioning, authentication, authorization, federation, policy enforcement, and machine-to-machine access.
Define secure identity and access patterns for AI-enabled systems, including AI agents, copilots, intelligent automation, autonomous workflows, machine identities, data access workflows, and applications requiring controlled access to enterprise or healthcare data.
Leverage AI, machine learning, and intelligent automation to improve identity operations, entitlement analysis, access reviews, anomaly detection, governance, audit readiness, operational insights, developer support, engineering productivity, and compliance with HIPAA, SOX, HITRUST, NIST, audit requirements, and Zero Trust principles.
Your Knowledge And Experience
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent combination of education and experience.
A minimum of 8 years of experience designing, implementing, and supporting enterprise Identity and Access Management solutions.
4 years of prior people management experience with direct responsibility for supervising, coaching, and evaluating direct reports
Experience leading IAM, security engineering, platform engineering, cloud, infrastructure, or related technical teams.
Strong understanding of Identity Lifecycle Management, Joiner/Mover/Leaver processes, Identity Governance, and Privileged Access Management within complex hybrid cloud, SaaS, and on-premises environments.
Deep understanding of Role-Based Access Control, Attribute-Based Access Control, policy-based access control, Just-in-Time, just-enough, time-bound, and Least Privilege security models.
Strong knowledge of authentication and authorization frameworks, including Single Sign-On, Multi-Factor Authentication, SAML, OAuth 2.0, OpenID Connect, SCIM, and modern identity federation technologies across enterprise and consumer ecosystems.
Experience implementing and supporting enterprise identity governance, access management, directory, privileged access, cloud identity, HR, and application integration platforms.
Experience delivering identity as a platform capability, including self-service, API-driven, and developer-consumable IAM services for application, cloud, platform, and security engineering teams.
Experience developing automation using scripting languages, REST APIs, workflow automation, or similar programming approaches.
Experience implementing DevOps or platform engineering practices, including CI/CD, Infrastructure as Code, configuration-as-code, policy-as-code, automated testing, automated deployment, observability, and operational reliability.
Strong understanding of cloud identity and access patterns, including workload identity, service identities, managed identities, secrets management, key management, privileged access controls, and machine-to-machine access.
Experience integrating IAM capabilities into enterprise applications, cloud services, SaaS platforms, infrastructure platforms, and modern software development lifecycles.
Experience applying identity controls to AI-enabled systems, including AI agents, copilots, intelligent automation, machine identities, data access workflows, human-in-the-loop approvals, audit logging, and least-privilege access to sensitive enterprise data.
Experience leveraging AI-assisted development, intelligent automation, or machine learning technologies to improve operational efficiency, accelerate identity engineering, enhance access governance, or improve risk detection.
Hybrid
This role requires employees to be in-office based on our hybrid workplace model, balancing purposeful in-person collaboration with flexibility.
For most teams, this means coming into the office two days each week.
Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need.
About Company
About Stellarus and the Ascendiun Family of Companies
Stellarus, launched in January 2025, is designed to scale innovative healthcare solutions that support customers in creating a health care experience deserving of their family, friends, and neighbors.
Stellarus is part of a family of organizations that is overseen by a nonprofit corporate entity named Ascendiun.
The Ascendiun Family of Companies also includes Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan and Altais, a clinical services company.
Stellarus’ vision is to empower its customers to create a healthcare experience that is worthy of their family, friends, and neighbors.
Stellarus’ objective is to offer innovative, modern, scalable solutions that challenge the health care status quo.
This very closely aligns with Blue Shield of California’s vision by using innovation to improve quality, affordability, and experience for members.
To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve.
We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.
Our Values
At Stellarus, our core values of agility, trust, drive, courage and service shape our approach to developing innovative product offerings.
Our Workplace Model
We believe in fostering a workplace environment that balances purposeful in-person collaboration with flexibility - providing clear expectations while respecting the diverse needs of our workforce.
Our workplace model is designed around intentional in-person interaction, collaboration, connection, creativity and flexibility:
For most teams, this means coming into the office two days per week.
Employees living more than 50 miles from an office location, out of state employees, and employees in certain member-facing roles should work with their manager to determine in-office time based on business need.
For employees with medical conditions that may impact their ability to work in-office, we are committed to engaging in an interactive process and providing reasonable accommodations to ensure their work environment is conducive to their success and well-being.
The Company reserves the right to require more presence in the office based on business needs, and requirements are subject to change with periodic reviews.
Physical Requirements
Office Environment - roles involving part to full time schedule in Office Environment.
Based in our physical offices and work from home office/deskwork - Activity level: Sedentary, frequency most of work day.
Please click here for further physical requirement detail.
Equal Employment Opportunity
External hires must pass a background check/drug screen.
Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance.
All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.
About BSC
Verified company details for this employer are not available yet.
