Staff Security Engineer - IAM

Aledade
Austin
Workplace: RemoteFull timeFunction: CybersecurityExperience: 4+ yearsEducation: bachelorsSkills: ["Cross-functional collaboration","Technical decision-making","Mentoring"]

Design, implement, and maintain security identity services that support Aledade’s health-tech mission. Own cloud IAM architecture and identity governance, including least-privilege policies, federation protocols, and non-human identity. Build automated CI/CD and access workflows using Terraform/CloudFormation and scripting, and apply advanced protocols and microservice security patterns. Partner cross-functionally, mentor engineers, and uphold security process standards across regulated healthcare environments.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Aledade
Aledade
1 week ago

Staff Security Engineer - IAM

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Design, implement, and maintain security identity services that support Aledade’s health-tech mission. Own cloud IAM architecture and identity governance, including least-privilege policies, federation protocols, and non-human identity. Build automated CI/CD and access workflows using Terraform/CloudFormation and scripting, and apply advanced protocols and microservice security patterns. Partner cross-functionally, mentor engineers, and uphold security process standards across regulated healthcare environments.
Location: Austin
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions for identity services.
  • •Design and deploy advanced identity security controls to safeguard networks, systems, and applications using IAM, governance, and least-privilege models.
  • •Automate identity provisioning and access workflows, including drift detection and access workflows using IaC and scripting.
  • •Own non-human identity security, including service accounts, API keys, bots, and automated workload identities across cloud infrastructure.
  • •Set and uphold security process standards and mentor engineers while partnering cross-functionally to drive security outcomes.

Pay and Benefits

Perks:Remote WorkHealth InsuranceDentalVisionPaid Leave401kEquityParental LeaveSabbatical

Key Requirements

  • •Experience architecting, developing, and deploying large-scale distributed systems at scale.
  • •Experience with cloud technologies such as AWS, Azure, and GCP.
  • •Hands-on experience building CI/CD pipelines and familiarity with server-side web technologies (e.g., Java, Python, Scala, C#, C++, Go).
  • •8+ years of experience in software or security engineering within cloud-native environments, with trusted decision-making in a team setting.
  • •Deep IAM and identity security expertise across least-privilege, RBAC/ABAC, federation (SAML/OIDC/OAuth/LDAP), and automation/IaC (Terraform/CloudFormation, scripting).
Experience:4+ yearsHealth-techCloud nativeIdentity and access managementAI securitySecurity observability
Education:Bachelor's in Computer Science, Information Technology, Cybersecurity
Skills:Cross-functional collaborationTechnical decision-makingMentoring
Certifications:CISSPOSCPCEHCertified AI Security Specialist (CAISS)GIAC Machine Learning Security Engineer (GMSE)
Tech Stack:AWSAzureGCPAWS BedrockGeminiClaudeCI/CDJavaPythonScalaC#C++GoTerraformCloudFormationPowerShellSPIFFESPIRESAMLOIDC

Company Brief

Aledade
Provides technology, services, and care-management support to independent primary care practices to participate in value-based care and accountable care organizations, helping clinicians improve outcomes, reduce costs, and share in savings.
Industry: HealthTech
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: Bethesda, United States
Founded: 2014
WebsiteLinkedIn