ROLE OVERVIEW

As a Senior Security Engineer at HealthVerity, you will help design, implement, and evolve security capabilities that protect our workforce, customers, cloud environments, and products. You will work across multiple security domains, with a particular focus on Identity and Access Management (IAM), cloud security, security architecture, and automation.

You will play a key engineering role in HealthVerity's IAM program, including workforce and customer identity. You will help design and implement secure authentication, authorization, federation, provisioning, and identity lifecycle capabilities, with Okta serving as a key component of our identity architecture.

Beyond IAM, you will work closely with Security, IT, Engineering, Product, and Cloud teams to design and implement security solutions across our AWS environments and broader technology ecosystem. This is a hands-on engineering role focused on building scalable security capabilities, integrating security technologies, solving complex technical problems, and automating security processes.

Security is a foundational component of HealthVerity's products and infrastructure. This role will help mature our security architecture while ensuring security controls support business growth, usability, and healthcare security and compliance requirements.

KEY RESPONSIBILITIES

Design, implement, and mature security solutions across IAM, cloud security, security architecture, and related security domains.
Engineer and enhance workforce and customer identity capabilities, including authentication, authorization, federation, provisioning, and identity lifecycle management.
Design, implement, and support Okta integrations, policies, workflows, and security controls.
Develop and maintain identity federation and integration solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related technologies.
Design and automate Joiner-Mover-Leaver lifecycle processes, provisioning, deprovisioning, access reviews, and other identity workflows.
Implement and enhance MFA, adaptive authentication, access policies, and privileged access controls.
Partner with application and engineering teams to integrate applications and services with enterprise and customer identity platforms.
Identify opportunities to automate security processes and build integrations between security platforms, cloud services, and enterprise systems.
Design and implement security controls and architecture across AWS and cloud environments.
Develop security tooling and automation using APIs, scripting, infrastructure as code, and other engineering approaches.
Assist in implementing and maintaining security controls supporting FedRAMP, HIPAA, SOC 2, and other regulatory and compliance requirements.
Perform security architecture reviews and assessments of applications, cloud environments, and technology solutions.
Mentor junior engineers and analysts and contribute to security engineering standards, patterns, and best practices.

QUALIFICATIONS

Required

7+ years of experience in Security Engineering, Identity Security, Cloud Security, or related disciplines.
Strong hands-on experience engineering and administering Okta environments.
Strong understanding of workforce identity and customer identity architectures and security controls.
Strong understanding of authentication, authorization, federation, SSO, MFA, and identity lifecycle management.
Hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
Experience designing and implementing identity integrations for enterprise applications, SaaS platforms, APIs, and cloud services.
Experience designing and implementing security controls in AWS environments.
Strong understanding of cloud security architecture, IAM, least privilege, and security design principles.
Experience developing security automation and integrations using Python, PowerShell, APIs, Terraform, or similar technologies.
Experience supporting security and compliance requirements such as FedRAMP, HIPAA, SOC 2.