Sr. Software Engineer, Identity & Access Management

Description

The company is a large healthcare company that makes care more accessible and affordable through its insights, products, and services.

This is a senior, hands-on role that builds and modernizes the authentication and authorization systems protecting the company's healthcare technology platforms.

The work centers on identity architecture, secure application development, and infrastructure automation, including moving applications and identity capabilities from legacy systems to modern platforms such as Okta.

You will own identity work from design through implementation, testing, deployment, and production support, and help set patterns other engineering teams can reuse.

Responsibilities

• Design, build, test, and ship secure authentication and authorization features, covering SSO, MFA, federation, provisioning, and identity lifecycle integrations.
• Lead the technical move of applications and users from legacy authentication and directory systems to Okta or a comparable modern identity platform.
• Build and maintain identity infrastructure in Terraform as code, creating reusable, version-controlled configuration and deployment patterns.
• Implement identity integrations using OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM.
• Develop secure services, APIs, and integrations that handle authentication, authorization, provisioning, and identity workflows.
• Work with application engineers, architects, product owners, and security teams to turn identity and access needs into scalable solutions.
• Build identity configuration and security controls into CI/CD pipelines, including automated testing and deployment.
• Review code and designs with a focus on authentication and authorization correctness, secrets handling, session management, and secure practices.
• Investigate complex production issues involving tokens, sessions, federation, provisioning, application integrations, and access policies.
• Help shape the architecture and roadmap for consolidating identity capabilities and retiring legacy authentication technologies.
• Coach engineers on secure development, identity patterns, infrastructure as code, and authentication architecture.
• Write clear technical documentation, identity flow diagrams, deployment patterns, and operational runbooks.
• Work with security, risk, and compliance teams to design identity solutions that suit a regulated healthcare environment.

Requirements

• A degree or equivalent experience, typically with 7+ years of relevant experience.
• 5+ years of professional software engineering experience, including owning production applications, services, platforms, or distributed systems.
• 2+ years of hands-on experience in identity, authentication, authorization, or security engineering.
• Strong programming skills in at least one backend or object-oriented language, such as Java, C, Python, or a comparable language.
• Production experience integrating applications with a modern identity provider such as Okta, Microsoft Entra ID, Auth0, Ping Identity, or a comparable platform.
• Hands-on production experience with OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Experience modernizing or migrating applications away from legacy authentication technologies such as LDAP, Active Directory, SiteMinder, or custom authentication services.
• Hands-on experience using Terraform to provision and manage infrastructure or platform configuration as code, including reusable modules, source control, review, testing, and deployment practices.
• Experience building or supporting REST APIs, microservices, or distributed applications in security-sensitive production environments.
• Experience with modern CI/CD and automated software delivery.
• Experience implementing secure practices for authentication, authorization, secrets, sessions, or access controls.
• Optional: Deep hands-on experience with Okta, including SSO, MFA, lifecycle management, provisioning, policies, and application integrations.
• Optional: Experience managing Okta configuration through Terraform.
• Optional: Experience with SCIM-based provisioning and identity lifecycle automation.
• Optional: Experience with AWS, Azure, or GCP.
• Optional: Experience with Docker, Kubernetes, or other cloud-native technologies.
• Optional: Experience with relational or NoSQL persistence technologies used in distributed applications.
• Optional: Experience with identity-related threat modeling, Zero Trust, least-privilege, or policy-based access controls.
• Optional: Experience building software in healthcare, financial services, insurance, life sciences, or another regulated environment.
• Optional: Familiarity with regulatory or security frameworks such as HIPAA, SOC 2, or comparable controls.
• Optional: Okta certification or an equivalent identity platform certification.

Conditions

Base pay ranges from $131,000 to $218,300.

Pay depends on performance, experience and skills, equity, periodic job market reviews, and geographic market.

An annual bonus or long-term incentive may be offered in addition to base pay.

Equal opportunity employer.

Benefits

• Competitive compensation package as part of Total Rewards.