Staff Software Engineer, Security

About the role

Passionate about precision medicine and advancing the healthcare industry? Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

The Staff Software Engineer for Security Engineering will drive key architectural initiatives for Tempus' Security stack: Technical Leadership & Strategy: Set the technical vision for security engineering, leading build-versus-buy decisions, IAM evolution, and cross-functional engineering best practices to scale platform innovation. Enabling Core Identity & Authentication: Drive customer-facing systems like Single Sign-On (SSO) and modern identity standards (OAuth, SAML, SCIM) to secure access across a decentralized microservices architecture. Supporting Agentic AI Infrastructure: Architect and secure emerging agentic controls and distributed event-based systems to ensure patient records and intellectual property are safely utilized by generative AI technologies.

At Tempus, software products are owned and developed by small, autonomous teams composed of developers, designers, scientists, and product managers. Our teams set the goals, build the software, deploy the code, and contribute to a growing software platform that will make a lasting impact in the fields of cancer research and precision medicine. Tempus builds software as nimble as our teams. Our modern tech stack - dynamic languages and the latest open source and cloud services - allows our teams to iterate rapidly and lead our industry in innovation. Our decentralized, microservice architecture and emphasis on loosely coupled architecture and automation allow us to deliver advanced solutions with confidence, and at scale.

Responsibilities

• Lead technical decisions for the security engineering team and implement best in class customer identity management, authorization, and observability systems across the business.
• Manage and improve the existing security micro-services, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.
• Work with a variety of teams cross-functionally to implement internal standards for security across a micro-service driven architecture.
• Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.
• Discover deficiencies in engineering tooling, designs, and processes and make the case for and driving improvements.
• Help level-up engineering practice across Tempus through documentation, mentorship, training, and engagement with engineers.
• Present new technologies and ideas to the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.
• Lead build/buy decisions in the security domain to improve the velocity of engineering, drive down costs, and ensure secure technical excellence.

Qualifications

• Experience setting the technical vision and direction for a product area, advocating for proven design principles and technology choices.
• Knowledge of when to implement identity standards, and where they need to be innovated on.
• Several years of experience working on software development teams, confident leading technical analysis & design, evaluating tradeoffs, leading build and