Senior Security Engineer

Function Health is the AI operating system for health, designed to empower people to live 100 healthy years. They are seeking a pragmatic Security Engineer focused on Identity and Access Management to lead the design and management of critical IAM systems that protect client health data.

Responsibilities:

• Administer and optimize Okta, including:
• Integrating new applications for SSO
• Implementing and enhancing provisioning and revocation workflows
• Building and maintaining Okta organizational structure and role mappings
• Administer ConductorOne to:
• Integrate it with all relevant applications
• Conduct User Access Reviews (UARs)
• Enforce time-based access controls
• Enable and improve automated provisioning and revocation
• Collaborate with cross-functional teams to ensure secure onboarding/offboarding and least privilege enforcement
• Support ongoing IAM policy development, documentation, and audit readiness
• Monitor and respond to IAM-related alerts and incidents, escalating as needed
• Identify opportunities to automate IAM workflows and enhance security operations
• Participate in broader security initiatives including vulnerability management, IT automation, and compliance support

Requirements:

• 3–5 years of hands-on experience administering IAM platforms, ideally Okta and/or ConductorOne
• Strong knowledge of SSO protocols (SAML, OIDC), provisioning standards (SCIM), and IAM best practices
• Experience integrating multiple SaaS applications into centralized IAM systems
• Familiarity with user lifecycle management, role-based access control (RBAC), and access review processes
• Solid understanding of cloud infrastructure identity models (GCP preferred) and security operations fundamentals
• Experience using Terraform for infrastructure as code, particularly for managing IAM resources and integrations
• Comfortable working independently in a fast-moving environment with minimal supervision
• Strong organizational skills and a detail-oriented mindset