[Remote] Senior Security Engineer

Note: The job is a remote job and is open to candidates in USA. HealthVerity is hiring a Senior Security Engineer to design, implement, and mature security capabilities that protect its workforce, customers, cloud environments, and products. The role focuses on IAM and Okta engineering, AWS cloud security, security architecture, automation, and support for healthcare security and compliance requirements.

Responsibilities

• Design, implement, and mature security solutions across IAM, cloud security, security architecture, and related security domains
• Engineer and enhance workforce and customer identity capabilities, including authentication, authorization, federation, provisioning, and identity lifecycle management
• Design, implement, and support Okta integrations, policies, workflows, and security controls
• Develop and maintain identity federation and integration solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related technologies
• Design and automate Joiner-Mover-Leaver lifecycle processes, provisioning, deprovisioning, access reviews, and other identity workflows
• Implement and enhance MFA, adaptive authentication, access policies, and privileged access controls
• Partner with application and engineering teams to integrate applications and services with enterprise and customer identity platforms
• Identify opportunities to automate security processes and build integrations between security platforms, cloud services, and enterprise systems
• Design and implement security controls and architecture across AWS and cloud environments
• Develop security tooling and automation using APIs, scripting, infrastructure as code, and other engineering approaches
• Assist in implementing and maintaining security controls supporting FedRAMP, HIPAA, SOC 2, and other regulatory and compliance requirements
• Perform security architecture reviews and assessments of applications, cloud environments, and technology solutions
• Mentor junior engineers and analysts and contribute to security engineering standards, patterns, and best practices

Skills

• 7+ years of experience in Security Engineering, Identity Security, Cloud Security, or related disciplines
• Strong hands-on experience engineering and administering Okta environments
• Strong understanding of workforce identity and customer identity architectures and security controls
• Strong understanding of authentication, authorization, federation, SSO, MFA, and identity lifecycle management
• Hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM
• Experience designing and implementing identity integrations for enterprise applications, SaaS platforms, APIs, and cloud services
• Experience designing and implementing security controls in AWS environments
• Strong understanding of cloud security architecture, IAM, least privilege, and security design principles
• Experience developing security automation and integrations using Python, PowerShell, APIs, Terraform, or similar technologies
• Experience supporting security and compliance requirements such as FedRAMP, HIPAA, SOC 2
• Experience with Active Directory and traditional enterprise identity infrastructure is beneficial but not required
• Experience with Identity Governance and Administration (IGA), privileged access management, and Zero Trust architectures is preferred
• Healthcare industry experience is a plus

Benefits

• Annual bonus opportunity for non-commissioned roles.
• For full-time employees in permanent positions: health, dental, and vision coverage starting on day 1.
• For full-time employees in permanent positions: a 401(k) plan.
• Equity program, with new hire equity grants beginning at the Director level and above.
• Remote workdays and 3 days a week of in-office collaboration for team members in the Philadelphia area; check location requirements with the recruiting team.
• Remote work for employees in hub locations, primarily from home, with in-person team gatherings at least once a year for team-building, collaboration, and strategic planning.
• Generous PTO targeted at 4 weeks per year, including vacation, personal and sick time, plus paid parental leave.
• Paid parental leave: 12 weeks for childbearing, surrogacy, and adoption; 6 weeks for non-childbearing parents.
• Comprehensive and individualized onboarding beginning day 1, including a mentorship program, departmental talks, and a library of resources.
• Professional development: biweekly 1:1s, hands-on leadership that is goal- and growth-oriented, and an annual budget to support professional development pursuits.

Company Overview

Company H1B Sponsorship