Senior Corporate Security Engineer - Zero-Trust & IAM Lead

Doctolib; Paris; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Paid vacation

RTT days

Relocation support

Transport subsidy

Job summary

Doctolib is seeking a Senior Corporate Security Engineer to join the Corporate Security team in SecOps. You will own security programs end-to-end, shipping controls as code and driving adoption across teams in a highly regulated healthcare environment.

The role focuses on identity, endpoints, SaaS apps, and zero-trust networking to protect patient data and system integrity. Ideal candidates have 5+ years of hands-on security experience, strong GitHub/Terraform skills, and deep identity & access

Qualifications

• 5+ years hands‑on experience securing corporate/enterprise environments (identity, endpoints, SaaS, network) including at least 2 years at a senior level.
• Strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent).
• Deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, modern authentication standards (passkeys, phishing‑resistant MFA).
• Pragmatic mindset with ability to decide under uncertainty and strong written communication skills.

Responsibilities

• Own security programs from architecture to enforcement (zero-trust network, MFA rollout).
• Ship changes as code using Terraform and GitHub PRs; report-only to enforce with reversible steps.
• Drive adoption across teams; present proposals and align IT and business stakeholders.
• Evaluate and secure tools, conduct security reviews of SaaS integrations and AI tools.
• Lead incident investigations on corporate perimeter and improve SIEM detection rules.
• Mentor junior engineers and foster engineering excellence.

Skills

Security engineering

GitHub

Terraform

AI coding assistants

Identity & access

English fluency

Tools

GitHub

Terraform

AI coding assistants

Job description

Doctolib is seeking a Senior Corporate Security Engineer to join the Corporate Security team in SecOps. You will own security programs end-to-end, shipping controls as code and driving adoption across teams in a highly regulated healthcare environment.

The role focuses on identity, endpoints, SaaS apps, and zero-trust networking to protect patient data and system integrity. Ideal candidates have 5+ years of hands-on security experience, strong GitHub/Terraform skills, and deep identity & access