Senior Identity Security Engineer

About the role

This is a hybrid role requiring 3 days in office at our Philadelphia HQ - 1818 Market Street.

Key responsibilities

• Own the architecture, engineering, and operation of HealthVerity's Identity and Access Management platforms across workforce and customer environments.
• Design, implement, and support enterprise Active Directory services and identity infrastructure.
• Develop and maintain identity federation solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos.
• Manage and enhance workforce identity services including Active Directory, Entra ID, and Okta.
• Support and enhance customer identity platforms including Auth0 and AWS Cognito.
• Develop and maintain the IAM roadmap aligned to business growth, security requirements, and regulatory obligations.
• Develop identity-focused security monitoring, alerting, and response playbooks.
• Assist in implementing and maintaining Zero Trust security principles.
• Partner with Security, IT, Engineering, Product, and Compliance teams on strategic initiatives.

Qualifications

• 7+ years of experience in Identity and Access Management, Identity Security, Security Engineering, or related disciplines.
• Expert-level experience with Active Directory administration, architecture, and security.
• Hands-on experience with customer identity platforms such as Auth0, AWS Cognito, Ping Identity, ForgeRock, or similar solutions.
• Strong experience administering and engineering Okta environments.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos.
• Experience implementing SSO, MFA, Conditional Access, and Privileged Access Management (PAM).
• Strong understanding of cloud identity and AWS security services.
• Experience supporting HIPAA, SOC 2, HITRUST, FedRAMP, or similar compliance frameworks.
• Experience with Python, PowerShell, Terraform, or similar automation technologies.

Paid benefits

• Competitive base salary & annual bonus opportunity (for non-commissioned roles).
• Health, dental, and vision coverage starting on day 1.
• A 401(k) plan and an equity program, with new hire equity grants beginning at the Director level and above.
• Flexible location: Remote workdays and 3 days a week of in-office collaboration for team members in the Philadelphia area.
• Generous PTO: Take time off as needed, targeted at 4 weeks per year, including vacation, personal and sick time, plus paid parental leave.
• Parental Leave: 12 weeks paid leave for childbearing, surrogacy, and adoption; 6 weeks for non-childbearing parents.
• Comprehensive and individualized onboarding: mentorship program, departmental talks, and a library of resources are available beginning day 1 for each new team member to minimize the stress of starting a new job.
• Professional development: biweekly 1:1s, hands-on leadership that is goal-and growth-oriented for each team member, and an annual budget to support professional development pursuits.