Senior Security Engineer

At Devoted Health, we’re on a mission to dramatically improve the health and well-being of older Americans by caring for every person like family. That’s why we’re gathering smart, diverse, and big-hearted people to create a new kind of all-in-one healthcare company — one that combines compassion, health insurance, clinical care, service, and technology - to deliver a complete and integrated healthcare solution that delivers high quality care that everyone would want for someone they love. Founded in 2017, we've grown fast and now serve members across the United States.  And we've just started. So join us on this mission!

Job Description

A bit about this role: 

We’re looking for a senior-level security engineer to level up our data security program. This hands-on role will be primarily focused on applying data and identity security principles to help protect Devoted’s most critical assets. Ideal candidates are highly motivated individuals who thrive in fast-paced environments, are comfortable with modern technology stacks that leverage the cloud, and who see risk as something to manage pragmatically.

Your Responsibilities and Impact will include:

• Design and secure data access patterns within all of our production and enterprise IT systems; ensuring the right entities have the right access to the right data.

• Research, test, and implement technical solutions that help detect, prevent, and monitor for unauthorized access.  

• Craft and implement an enterprise-wide data and identity security strategy that will help propel Devoted into the next phase of their cyber maturity journey.   

• Develop, document, and maintain security policies, standards, and procedures. 

• Respond to security incidents as needed as a subject matter expert. 

• Liaise with business and corporate functions to capture and facilitate inclusion of their requirements into relevant security initiatives. 

• Support internal and external IT and security audits as needed.
   

Required skills and experience:

• 7+ years of experience as a technical, hands-on security engineer in a regulated industry. 

• Deep knowledge of the inner workings of identity and access management principles such as OAuth, OIDC, SAML, and SCIM.  

• Experience designing and implementing identity and access control methodologies and policies (i.e. RBAC and ABAC) in a regulated corporate environment.

• Hands-on experience administering industry leading identity management solutions such as Okta, Ping Identity, Google Workspace, and/or Active Directory. 

• Firm understanding of cloud security engineering principles and how to instantiate controls through writing Terraform or a similar infrastructure-as-code programming language.  

• Excellent communication skills with the ability to comfortably and effectively articulate security and risk related concepts to highly technical audiences.

Desired skills and experience:

• Hands-on experience securing industry leading data warehousing, analytics, and support tools such as Snowflake, Looker, and Apache Airflow. 

• Fundamental knowledge of relevant security and control frameworks, such as HIPAA, HITRUST, PCI, and GDPR.

• Experience with JIRA and Confluence.

Salary Range:  $130,000 - $200,000 / year

Healthcare equality is at the center of Devoted’s mission to treat our members like family.  We are committed to a diverse and vibrant workforce.  If you lack a specific credential for this position but believe that your strengths and life experiences will propel our mission, we would love to hear from you.

Our Total Rewards package includes:

• Employer sponsored health, dental and vision plan with low or no premium

• Generous paid time off

• $100 monthly mobile or internet stipend

• Stock options for all employees

• Bonus eligibility for all roles excluding Director and above; Commission eligibility for Sales roles

• Parental leave program

• 401K program

• And more....

*Our total rewards package is for full time employees only. Intern and Contract positions are not eligible.

The salary and/or hourly range listed is a good faith determination of potential base compensation that may be offered to a successful applicant for this position at the time of this job advertisement and may be modified in the future. When determining a team member's base salary and/or rate, several factors may be considered as applicable (e.g., location, specialty, years of relevant experience, education, credentials, budget and internal equity).

Devoted is an equal opportunity employer. We are committed to a safe and supportive work environment in which all employees have the opportunity to participate and contribute to the success of the business. We value diversity and collaboration. Individuals are respected for their skills, experience, and unique perspectives. This commitment is embodied in Devoted’s Code of Conduct, our company values and the way we do business.

As an Equal Opportunity Employer, the Company does not discriminate on the basis of race, color, religion, sex, pregnancy status, marital status, national origin, disability, age, sexual orientation, veteran status, genetic information, gender identity, gender expression, or any other factor prohibited by law. Our management team is dedicated to this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities and general treatment during employment.