Senior Engineer, IT Security

Chartis is a company focused on transforming U.S. healthcare by working with over 1,900 organizations to create innovative solutions. They are seeking a hands-on Senior Security Engineer to enhance security across cloud-native and AI-driven engineering teams, ensuring that security is integrated into application development and delivery pipelines.

Responsibilities:

• Partner with engineering teams to design secure architectures and solutions
• Integrate security controls into CI/CD pipelines, platform tooling, and application onboarding processes
• Provide technical guidance and reusable patterns for secure development
• Own and improve the application onboarding and identity integration process
• Translate security requirements into practical, scalable, and automated controls
• Collaborate closely with developers while maintaining clear ownership within the Security team

Requirements:

• 5–8+ years of hands-on experience in security engineering with a direct focus on IAM and DevSecOps practices (no purely advisory or oversight roles)
• Proven, hands-on administration and engineering experience with Okta, including: Okta Identity Cloud (OIC), Okta Identity Governance (OIG), Okta Workflows, Application onboarding, lifecycle management, and policy enforcement
• Strong, hands-on cloud administration experience in Microsoft Azure (required), including identity, access control, and resource governance
• Working knowledge of AWS and Google Cloud Platform in multi-cloud environments
• Hands-on experience with Kubernetes (K8s), including workload identity, access controls, and platform security considerations
• Working knowledge of Splunk Cloud, including building alerts, dashboards, and detection logic for security-relevant events
• Strong understanding of modern authentication and authorization standards, including OAuth2, OIDC, and SAML
• Proficiency in Python scripting for automation, integration, and operational tooling
• Demonstrated experience integrating security into CI/CD pipelines and infrastructure-as-code workflows
• Experience designing and implementing RBAC/ABAC models across cloud and SaaS platforms
• Demonstrated experience performing threat modeling (e.g., STRIDE, attack trees) and translating findings into actionable engineering controls
• Okta certifications (e.g., Okta Certified Administrator, Okta Certified Professional, or equivalent advanced certification)
• Experience supporting AI/ML platforms or AI-enabled application ecosystems
• Experience with secrets management and zero trust architecture patterns
• Experience with tools like LangSmith and other AI related tools