Note: The job is a remote job and is open to candidates in USA. HealthVerity is a healthcare data exchange company that enables privacy-protected access to real-world healthcare data. The Senior Security Engineer will own the Identity and Access Management program, designing and operating identity services across workforce and customer environments while advancing Zero Trust, access governance, and healthcare security compliance.
Responsibilities
- Own the architecture, engineering, and operation of HealthVerity's Identity and Access Management platforms across workforce and customer environments
- Design, implement, and support enterprise Active Directory services and identity infrastructure
- Design and implement scalable identity architectures using Active Directory, Okta, Auth0, AWS Cognito, and related technologies
- Develop and maintain identity federation solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos
- Manage and enhance workforce identity services including Active Directory, Entra ID, and Okta
- Support and enhance customer identity platforms including Auth0 and AWS Cognito
- Develop and maintain the IAM roadmap aligned to business growth, security requirements, and regulatory obligations
- Develop identity-focused security monitoring, alerting, and response playbooks
- Assist in implementing and maintaining Zero Trust security principles
- Partner with Security, IT, Engineering, Product, and Compliance teams on strategic initiatives
Skills
- 7+ years of experience in Identity and Access Management, Identity Security, Security Engineering, or related disciplines
- Expert-level experience with Active Directory administration, architecture, and security
- Hands-on experience with customer identity platforms such as Auth0, AWS Cognito, Ping Identity, ForgeRock, or similar solutions
- Strong experience administering and engineering Okta environments
- Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos
- Experience implementing SSO, MFA, Conditional Access, and Privileged Access Management (PAM)
- Strong understanding of cloud identity and AWS security services
- Experience supporting HIPAA, SOC 2, HITRUST, FedRAMP, or similar compliance frameworks
- Experience with Python, PowerShell, Terraform, or similar automation technologies
- Due to tax and labor regulations, we can only hire from specific states
- Remote work is supported in the following key hub locations and approved states:
- * Philadelphia, Pennsylvania * Boston, Massachusetts * New York City, New York * Baltimore, Maryland * Washington, D.C. * Charlotte, North Carolina * Raleigh-Durham, North Carolina * Atlanta, Georgia * Chicago, Illinois
- **Approved States for Remote Work:**CT, DE, FL, GA, IL, IN, MA, MD, MI, NC, NJ, NY, OH, PA, TN, and VA
- Experience with Entra ID, Identity Governance and Administration (IGA), and Zero Trust architectures preferred
- Healthcare industry experience is a plus
Benefits
- Annual bonus opportunity for non-commissioned roles
- Health, dental, and vision coverage starting on day 1 for full-time employees in permanent positions
- 401(k) plan
- Equity program, with new hire equity grants beginning at the Director level and above
- Remote workdays and 3 days a week of in-office collaboration for team members in the Philadelphia area
- Generous PTO targeted at 4 weeks per year, including vacation, personal and sick time, plus paid parental leave
- 12 weeks paid leave for childbearing, surrogacy, and adoption; 6 weeks for non-childbearing parents
- Comprehensive and individualized onboarding, including a mentorship program, departmental talks, and a library of resources available beginning day 1 for each new team member
- Biweekly 1:1s, hands-on leadership that is goal- and growth-oriented, and an annual budget to support professional development pursuits
Company Overview
Company H1B Sponsorship