Senior Staff IAM Engineer

🕒 August 10

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenLoop

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

⚖️ Legal

📦 Logistics

💰 $15M Series A - OpenLoop Health on 2023-03

Consulting • Legal • Logistics

OpenLoop is a white-label telehealth platform and managed services provider that helps organizations launch and scale virtual care programs. It combines SaaS-based, brandable technology (scheduling, booking, payments, EHR/API integrations) with clinical staffing, credentialing, payer coverage and RCM, regulatory/legal support, and 24/7 patient support. OpenLoop serves health plans, hospitals and health systems, retailers, employers and digital health companies with AI-powered operations, a nationwide clinician network and broad insurance coverage including Medicare and Medicaid.

📋 Description

• Own the target-state identity architecture across workforce, non-employee, external, non-human, and AI agent identity types • Set identity standards, reference patterns, and architecture decision records • Own Auth0 customer identity architecture, including tenant and organization modelling, MFA, phishing-resistant authentication, and machine-to-machine patterns • Separate customer and patient identity from the workforce plane and design external, partner, developer, and B2B customer identity models • Architect consolidation of authentication paths onto a single workforce IdP • Design SSO, SCIM provisioning, and automated deprovisioning patterns for sensitive-data applications • Define federation and directory architecture across Okta, Entra ID, AWS, and GCP, including subsidiary and acquisition integration patterns • Build Identity Security Posture Management, extending the posture warehouse and remediation engine • Define identity posture metrics and integrate identity threat detection and response into the existing SIEM • Design HIPAA, HITRUST, and SOC 2-compliant access controls and maintain architecture documentation and control mappings • Serve as design authority between identity-risk and engineering functions, providing architectural remediation paths • Deliver an approved target-state architecture, customer identity architecture, workforce IdP consolidation architecture, and production Identity Security Posture Management baseline

🎯 Requirements

• 8+ years in identity and access management, security engineering, or platform architecture • At least 3 years at a staff, principal, or architect level • Deep hands-on customer identity experience designing and delivering a CIAM platform end to end, ideally Auth0 • Experience with Auth0 tenant and organization modelling, MFA, and machine-to-machine authentication • Strong command of SAML, OIDC, OAuth 2.0, SCIM, WebAuthn, and FIDO2 • Enterprise workforce IdP architecture experience with Okta or equivalent • Experience migrating from legacy or fragmented authentication sources • Ability to set architectural direction and gain engineering adoption without direct authority • Clear written communication, including architecture decision records and reference designs • Preferred: HIPAA/PHI safeguards or comparable regulated-industry access requirements • Preferred: identity governance, joiner-mover-leaver lifecycle, RBAC, access certification, segregation of duties, and SailPoint ISC/NERM or comparable platforms • Preferred: cloud PAM and zero-standing-privilege models, particularly Britive or similar tooling • Preferred: cloud-native identity across AWS, GCP, and Azure • Preferred: Identity Security Posture Management, identity threat detection, and SIEM integration • Preferred: non-human identity, service account governance, secrets management, or AI agent identity • Preferred: Terraform for identity infrastructure as code • Preferred: HITRUST, SOC 2, or SOX access controls • Preferred: relevant certifications such as CISSP, CISSP-ISSAP, CISM, TOGAF, SABSA, Okta, Auth0, SailPoint, or professional-level cloud architect certification • Preferred: digital health, telehealth, or another regulated high-growth environment • Authorization to work in the location of the job posting

🏖️ Benefits

• Medical, Dental, and Vision plans • Flexible Spending/Health Savings Accounts • Flexible PTO • 401(k) + Company Match • Life Insurance • Pet insurance