Senior Corporate Security Engineer: Zero-Trust IAM Lead

Doctolib; Paris; Hybrid; EUR 100,000 - 170,000; Full time

Benefits offered by this job

Health insurance

25 days vacation + RTT

Mental health support (Moka.care)

Job summary

Doctolib is seeking a Senior Corporate Security Engineer to join the Corporate Security team in SecOps, securing identities, endpoints, SaaS apps, and a zero-trust network in a highly regulated healthcare environment. You will own end-to-end security programs, ship controls as code, and drive adoption across teams while protecting data for millions of patients and health professionals.

The role emphasizes building and enforcing security controls, collaborating with IT and product teams, and

Qualifications

• 5+ years hands-on experience securing corporate/enterprise environments — identity, endpoints, SaaS, and network, including at least 2 years at a senior level.
• Built and enforced security controls in production (not only monitored alerts) and owned at least one significant program end-to-end, such as an MFA rollout, a device-compliance initiative, or a SaaS access-governance project.
• Strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent). Ship security work as reviewed PRs and use AI agents as part of the workflow.
• Deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, and modern authentication standards (passkeys, phishing-resistant MFA).
• Pragmatic mindset with decision-making under uncertainty and strong written communication skills; able to carry a proposal from draft to cross-team adoption.
• Fluent in English; daily team conversations in French, so French or willingness to learn is a plus.

Responsibilities

• Own corporate security programs from architecture to enforcement: conditional access, phishing-resistant authentication, device compliance, SaaS and third-party app governance (including AI tools), and zero-trust network access.
• Ship every change as code: use Terraform and GitHub PRs to bring controls to production designed, peer-reviewed, rolled out progressively (report-only → enforce), and always reversible.
• Drive adoption across teams: write technical proposals, align IT and business stakeholders, plan communications and exception handling, and land security controls without disrupting how people work.
• Evaluate and secure the tools Doctolibers adopt: conduct security reviews of SaaS integrations and AI tools, and deliver pragmatic, risk-based responses to shadow IT.
• Investigate and improve: lead incident investigations on the corporate perimeter end-to-end, and continuously improve detection rules and response playbooks in our Elastic SIEM.
• Mentor more junior engineers and contribute to a team culture of engineering excellence and peer review.

Skills

Security program ownership

Identity & access

MFA rollout

SaaS governance

Zero-trust network

Tools

Terraform

GitHub

Entra ID

Intune

CrowdStrike

Cloudflare

Elastic

Google Workspace

Job description

Doctolib is seeking a Senior Corporate Security Engineer to join the Corporate Security team in SecOps, securing identities, endpoints, SaaS apps, and a zero-trust network in a highly regulated healthcare environment. You will own end-to-end security programs, ship controls as code, and drive adoption across teams while protecting data for millions of patients and health professionals.

The role emphasizes building and enforcing security controls, collaborating with IT and product teams, and