Senior Staff IAM Engineer

🕒 Agosto 10

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

👷🏻‍♀️ Engenheiro

👻 Score fantasma 10%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

OpenLoop

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2020

💼 Consultoria

⚖️ Jurídico

📦 Logística

💰 $15.000.000 Series A - OpenLoop Health em 2023-03

Consulting • Legal • Logistics

A OpenLoop é uma plataforma de telemedicina marca branca e fornecedora de serviços gerenciados que ajuda as organizações a lançar e escalar programas de atendimento virtual. Combina tecnologia SaaS personalizável (agendamento, reservas, pagamentos, integrações EHR/API) com equipe clínica, credenciamento, cobertura de pagamento e RCM, suporte regulatório/jurídico e suporte ao paciente 24/7. A OpenLoop atende planos de saúde, hospitais e sistemas de saúde, varejistas, empregadores e empresas de saúde digital com operações impulsionadas por IA, uma rede nacional de médicos e ampla cobertura de seguros, incluindo Medicare e Medicaid.

Descrição

• Own the target-state identity architecture across workforce, non-employee, external, non-human, and AI agent identity types • Set identity standards, reference patterns, and architecture decision records • Own Auth0 customer identity architecture, including tenant and organization modelling, MFA, phishing-resistant authentication, and machine-to-machine patterns • Separate customer and patient identity from the workforce plane and design external, partner, developer, and B2B customer identity models • Architect consolidation of authentication paths onto a single workforce IdP • Design SSO, SCIM provisioning, and automated deprovisioning patterns for sensitive-data applications • Define federation and directory architecture across Okta, Entra ID, AWS, and GCP, including subsidiary and acquisition integration patterns • Build Identity Security Posture Management, extending the posture warehouse and remediation engine • Define identity posture metrics and integrate identity threat detection and response into the existing SIEM • Design HIPAA, HITRUST, and SOC 2-compliant access controls and maintain architecture documentation and control mappings • Serve as design authority between identity-risk and engineering functions, providing architectural remediation paths • Deliver an approved target-state architecture, customer identity architecture, workforce IdP consolidation architecture, and production Identity Security Posture Management baseline

🎯 Requisitos

• 8+ years in identity and access management, security engineering, or platform architecture • At least 3 years at a staff, principal, or architect level • Deep hands-on customer identity experience designing and delivering a CIAM platform end to end, ideally Auth0 • Experience with Auth0 tenant and organization modelling, MFA, and machine-to-machine authentication • Strong command of SAML, OIDC, OAuth 2.0, SCIM, WebAuthn, and FIDO2 • Enterprise workforce IdP architecture experience with Okta or equivalent • Experience migrating from legacy or fragmented authentication sources • Ability to set architectural direction and gain engineering adoption without direct authority • Clear written communication, including architecture decision records and reference designs • Preferred: HIPAA/PHI safeguards or comparable regulated-industry access requirements • Preferred: identity governance, joiner-mover-leaver lifecycle, RBAC, access certification, segregation of duties, and SailPoint ISC/NERM or comparable platforms • Preferred: cloud PAM and zero-standing-privilege models, particularly Britive or similar tooling • Preferred: cloud-native identity across AWS, GCP, and Azure • Preferred: Identity Security Posture Management, identity threat detection, and SIEM integration • Preferred: non-human identity, service account governance, secrets management, or AI agent identity • Preferred: Terraform for identity infrastructure as code • Preferred: HITRUST, SOC 2, or SOX access controls • Preferred: relevant certifications such as CISSP, CISSP-ISSAP, CISM, TOGAF, SABSA, Okta, Auth0, SailPoint, or professional-level cloud architect certification • Preferred: digital health, telehealth, or another regulated high-growth environment • Authorization to work in the location of the job posting

🏖️ Benefícios

• Medical, Dental, and Vision plans • Flexible Spending/Health Savings Accounts • Flexible PTO • 401(k) + Company Match • Life Insurance • Pet insurance