Senior Security Engineer I, IAM

About the role

Oscar Health is seeking a Senior Security Engineer I specializing in Identity and Access Management (IAM) to join our dynamic team in New York City. In this role, you will be responsible for enhancing our security posture by developing and implementing IAM strategies that protect sensitive data and ensure compliance with industry standards. You will collaborate with cross-functional teams to design secure systems and processes while addressing emerging security threats. This position offers a unique opportunity to influence the security landscape of a leading health technology company.

Key facts

What you'll do

• Design and implement IAM solutions that align with Oscar Health's security policies and regulatory requirements, ensuring protection of user identities and access controls.
• Conduct risk assessments and vulnerability analyses to identify potential security weaknesses within IAM systems and recommend appropriate mitigation strategies.
• Collaborate with IT and development teams to integrate IAM solutions into existing applications and infrastructure, ensuring user experiences while maintaining security standards.
• Monitor and respond to security incidents related to IAM, conducting thorough investigations and implementing corrective actions to prevent future occurrences.
• Develop and maintain IAM documentation, including policies, procedures, and technical specifications, to ensure clarity and compliance across the organization.
• Provide expert guidance and training to internal teams on IAM best practices, fostering a culture of security awareness and compliance.
• Stay abreast of the latest trends and technologies in IAM and cybersecurity, evaluating their applicability to Oscar Health's security framework.
• Participate in the design and execution of security audits and assessments, ensuring that IAM systems meet compliance requirements and industry standards.
• Work closely with legal and compliance teams to ensure that IAM practices adhere to healthcare regulations, such as HIPAA and HITECH.
• Assist in the development of incident response plans related to IAM breaches, ensuring timely and effective responses to security threats.
• Collaborate with external vendors and partners to evaluate and implement third-party IAM solutions that enhance Oscar Health's security capabilities.
• Contribute to the continuous improvement of IAM processes and technologies, identifying opportunities for automation and efficiency gains.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in security engineering, with a focus on IAM solutions and practices.
• Strong understanding of IAM frameworks, protocols, and technologies, including SSO, MFA, and identity governance.
• Proficiency in security tools and technologies such as Active Directory, LDAP, SAML, OAuth, and OpenID Connect.
• Experience with cloud security and IAM solutions in environments such as AWS, Azure, or Google Cloud Platform.
• Familiarity with regulatory requirements and compliance standards relevant to the healthcare industry, including HIPAA and PCI-DSS.
• Excellent problem-solving skills and the ability to work independently as well as part of a team.
• Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven track record of managing security projects from inception to completion, demonstrating strong organizational skills.

Nice to have

• Relevant certifications such as CISSP, CISM, or CISA.
• Experience with DevSecOps practices and integrating security into the software development lifecycle.
• Knowledge of programming languages such as Python, Java, or PowerShell for automation and scripting purposes.
• Familiarity with security incident response frameworks and methodologies.
• Experience in conducting security training and awareness programs for employees.

Skills & tools

• Identity and Access Management (IAM)
• Security Information and Event Management (SIEM)
• Vulnerability assessment tools
• Cloud security platforms
• Risk management frameworks
• Compliance management tools

Practical notes

• This role is based in New York City, and candidates should be prepared for a hybrid work environment.
• The position may require occasional on-call support for security incidents outside of regular business hours.
• Oscar Health values diversity and inclusion; we encourage applicants from all backgrounds to apply.
• For more information about the company and to apply, please visit our careers page at http://www.hioscar.com/careers/8059239?gh_jid=8059239.

Join us at Oscar Health, where we are redefining healthcare through technology and innovation. Your expertise in security engineering will play a crucial role in safeguarding our users' identities and ensuring the integrity of our systems.