Job description

ROLE OVERVIEW As a Senior Security Engineer at HealthVerity, you will help design, implement, and evolve security capabilities that protect our workforce, customers, cloud environments, and products. You will work across multiple security domains, with a particular focus on Identity and Access Management (IAM), cloud security, security architecture, and automation. You will play a key engineering role in HealthVerity's IAM program, including workforce and customer identity. You will help design and implement secure authentication, authorization, federation, provisioning, and identity lifecycle capabilities, with Okta serving as a key component of our identity architecture. Beyond IAM, you will work closely with Security, IT, Engineering, Product, and Cloud teams to design and implement security solutions across our AWS environments and broader technology ecosystem. This is a hands-on engineering role focused on building scalable security capabilities, integrating security technologies, solving complex technical problems, and automating security processes. Security is a foundational component of HealthVerity's products and infrastructure. This role will help mature our security architecture while ensuring security controls support business growth, usability, and healthcare security and compliance requirements. KEY RESPONSIBILITIES Design, implement, and mature security solutions across IAM, cloud security, security architecture, and related security domains. Engineer and enhance workforce and customer identity capabilities, including authentication, authorization, federation, provisioning, and identity lifecycle management. Design, implement, and support Okta integrations, policies, workflows, and security controls. Develop and maintain identity federation and integration solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related technologies. Design and automate Joiner-Mover-Leaver lifecycle processes, provisioning, deprovisioning, access reviews, and other identity workflows. Implement and enhance MFA, adaptive authentication, access policies, and privileged access controls. Partner with application and engineering teams to integrate applications and services with enterprise and customer identity platforms. Identify opportunities to automate security processes and build integrations between security platforms, cloud services, and enterprise systems. Design and implement security controls and architecture across AWS and cloud environments. Develop security tooling and automation using APIs, scripting, infrastructure as code, and other engineering approaches. Assist in implementing and maintaining security controls supporting FedRAMP, HIPAA, SOC 2, and other regulatory and compliance requirements. Perform security architecture reviews and assessments of applications, cloud environments, and technology solutions. Mentor junior engineers and analysts and contribute to security engineering standards, patterns, and best practices. QUALIFICATIONS Required 7+ years of experience in Security Engineering, Identity Security, Cloud Security, or related disciplines. Strong hands-on experience engineering and administering Okta environments. Strong understanding of workforce identity and customer identity architectures and security controls. Strong understanding of authentication, authorization, federation, SSO, MFA, and identity lifecycle management. Hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM. Experience designing and implementing identity integrations for enterprise applications, SaaS platforms, APIs, and cloud services. Experience designing and implementing security controls in AWS environments. Strong understanding of cloud security architecture, IAM, least privilege, and security design principles. Experience developing security automation and integrations using Python, PowerShell, APIs, Terraform, or similar technologies. Experience supporting security and compliance requirements such as FedRAMP, HIPAA, SOC 2. Preferred Experience with Active Directory and traditional enterprise identity infrastructure is beneficial but not required Experience with Identity Governance and Administration (IGA), privileged access management, and Zero Trust architectures is preferred. Healthcare industry experience is a plus. Base salary for the role is commensurate with experience and can range between $145,000 - 175,000 + annual bonus opportunity. Hiring Locations Our main office is located in Center City, Philadelphia, where we operate on a hybrid model with in-office work required three days a week for local employees. We believe collaboration is most effective when teams come together, which is why we prioritize hiring in the Philadelphia area. For certain roles, we also hire from hub locations —regions where we have an established presence with multiple team members working remotely. While these employees primarily work from home, we bring them together in person at least once a year for team-building, collaboration, and strategic planning. Due to tax and labor regulations, we can only hire from specific states. Remote work is supported in the following key hub locations and approved states: Hub Locations: Philadelphia, Pennsylvania Boston, Massachusetts New York City, New York Baltimore, Maryland Washington, D.C. Charlotte, North Carolina Raleigh-Durham, North Carolina Atlanta, Georgia Chicago, Illinois Approved States for Remote Work: CT, DE, FL, GA, IL, IN, MA, MD, MI, NC, NJ, NY, OH, PA, TN, and VA. About HealthVerity HealthVerity is the leader in privacy-protected real-world data exchange, transforming how healthcare and life sciences organizations connect and analyze disparate patient data. By enabling access to the industry’s largest RWD ecosystem, HealthVerity supports critical applications in clinical development, commercial strategy, regulatory decision-making, and public health. To learn more about HealthVerity, visit healthverity.com . Why you'll love working here We are making a difference – Our technology is at the forefront of some of the biggest healthcare challenges in the world. We are one team – Our people define our culture and always will. We take time out to celebrate each other, and acknowledge the value that each of us adds towards our greater mission. Come share all you have to offer. We are learners – Every team member is continually learning, no matter if we've been in a role for one year or much longer. We are committed to learning and implementing what is best for our clients, partners, and each other. Benefits & Perks Our benefits package is thoughtfully designed to support and enrich the experience of our full-time employees, with eligibility limited to those in permanent positions. Compensation: competitive base salary & annual bonus opportunity (for non-commissioned roles) Benefits: We offer health, dental, and vision coverage starting on day 1. We also offer a 401(k) plan and an equity program, with new hire equity grants beginning at the Director level and above. Flexible location: Remote workdays and 3 days a week of in-office collaboration for team members in the Philadelphia area. Check location requirements with the recruiting team. Generous PTO: Take time off as needed, targeted at 4 weeks per year, including vacation, personal and sick time, plus paid parental leave. Parental Leave: 12 weeks paid leave for childbearing, surrogacy, and adoption; 6 weeks for non-childbearing parents. Comprehensive and individualized onboarding: mentorship program, departmental talks, and a library of resources are available beginning day 1 for each new team member to minimize the stress of starting a new job Professional development: biweekly 1:1s, hands-on leadership that is goal-and growth-oriented for each team member, and an annual budget to support professional development pursuits We believe incorporating different ideas, perspectives and backgrounds make us stronger and encourages an environment where ageism, racism, sexism, ableism, homophobia, transphobia or any other form of discrimination are not tolerated. All qualified job applicants will be given consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability. At HealthVerity, we’re working towards an innovative and connected future for healthcare data and believe the future is better together. We can only do that if everyone has a seat at the table. If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to careers@healthverity.com Remote opportunities are not available in all areas and require team members to work from a fixed location due to tax and labor law implications - specific questions about remote positions can be discussed during the interview process with your recruiter.

Requirements

Must-haves

Design, implement, and mature security solutions across IAM, cloud security, security architecture, and related security domains.
Engineer and enhance workforce and customer identity capabilities, including authentication, authorization, federation, provisioning, and identity lifecycle management.
Design, implement, and support Okta integrations, policies, workflows, and security controls.
Develop and maintain identity federation and integration solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related technologies.
Design and automate Joiner-Mover-Leaver lifecycle processes, provisioning, deprovisioning, access reviews, and other identity workflows.
Implement and enhance MFA, adaptive authentication, access policies, and privileged access controls.
Partner with application and engineering teams to integrate applications and services with enterprise and customer identity platforms.
Identify opportunities to automate security processes and build integrations between security platforms, cloud services, and enterprise systems.
Design and implement security controls and architecture across AWS and cloud environments.
Develop security tooling and automation using APIs, scripting, infrastructure as code, and other engineering approaches.
Assist in implementing and maintaining security controls supporting FedRAMP, HIPAA, SOC 2, and other regulatory and compliance requirements.
Perform security architecture reviews and assessments of applications, cloud environments, and technology solutions.
Mentor junior engineers and analysts and contribute to security engineering standards, patterns, and best practices.
7+ years of experience in Security Engineering, Identity Security, Cloud Security, or related disciplines.
Strong hands-on experience engineering and administering Okta environments.
Strong understanding of workforce identity and customer identity architectures and security controls.
Strong understanding of authentication, authorization, federation, SSO, MFA, and identity lifecycle management.
Hands-on experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
Experience designing and implementing identity integrations for enterprise applications, SaaS platforms, APIs, and cloud services.

Nice-to-haves

Experience with Identity Governance and Administration (IGA), privileged access management, and Zero Trust architectures is preferred.
Healthcare industry experience is a plus.
Base salary for the role is commensurate with experience and can range between $145,000 - 175,000 + annual bonus opportunity.
Hiring Locations
Due to tax and labor regulations, we can only hire from specific states. Remote work is supported in the following key hub locations and approved states:

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awspython

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave

Professional Development