IAM Engineer

Tempus AI; Redwood City (CA); Hybrid; USD 100,000 - 145,000; Full time

Benefits offered by this job

Incentive compensation

Restricted stock units

Medical benefits

Job summary

Tempus AI is seeking an IAM Engineer to design and maintain robust identity and access management solutions. You will work across domains, implementing OKTA-based workflows and secure authentication controls in a data-rich clinical context.

The role requires 3+ years in IT security with IAM focus, strong collaboration skills, and hands-on Terraform/GitHub experience. California-based, with flexible hybrid options and a comprehensive benefits package.

Qualifications

• 3+ years of IT Security experience with at least 2 years in IAM Engineering.
• Extensive experience with OKTA and OKTA Workflows.
• Excellent communication and collaboration skills, able to translate complex security concepts.
• Strong project management skills to drive IAM initiatives.
• Hands-on experience with Terraform and GitHub.
• Solid understanding of IAM frameworks and technologies (SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SOAP, REST, SCIM).
• Knowledge of security risk management frameworks and compliance practices (ISO 27001, SOC2 Type 2, NIST 800-30).

Responsibilities

• Design, implement, and maintain IAM solutions across multiple domains including OKTA.
• Identify and mitigate IAM-related security risks and threats.
• Collaborate with IT and other business units to promote IAM awareness.
• Develop and deploy secure authentication/authorization controls in data-rich environments.
• Partner with teams to integrate IAM best practices into operations.

Skills

IAM Engineering

Okta

Security risk assessment

Communication

Project management

Terraform

GitHub

Tools

OKTA

OKTA Workflows

Job description

Passionate about precision medicine and advancing the healthcare industry?

Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

Are you passionate about making a difference in the world of cancer genomics?

At Tempus, biological samples are processed in our in-house lab and turned into valuable genomic data. This data flows from on-site to an extensive cloud-based infrastructure and set of workflows that produce impactful insights. SaaS products are developed in-house by cross functional teams to share those insights with our clients.

Tempus’ approach to information security allows us to react to threats to any of the environments and workflows described above and identify and close gaps quickly. Our effective security operations engrained with comprehensive monitoring, testing, and risk management allow us to protect Tempus without reducing the speed at which we do business. You and your team set the security goals and design and deploy the products, controls, and workflows to ensure Tempus will continue to make a lasting impact in the field of cancer research and treatment.

As an IAM Engineer, you’ll play a critical role in fulfilling the mission of Tempus by helping ensure we provide secure and private precision medicine methodologies for our clients and their patients.

Responsibilities

• Practical experience with authentication and authorization protocols.
• Proven experience in the design, implementation, and maintenance of comprehensive IAM solutions across various domains, including OKTA and OKTA Workflows.
• Strong skills in identifying, assessing, and mitigating IAM-related security risks, proactively addressing potential threats and vulnerabilities.
• Understanding of best practices surrounding authentication and authorization in a data rich environment.
• Proven ability to collaborate with IT and other business units to promote IAM awareness and integrate IAM best practices into operational processes.

Requirements

• 3+ years of experience in IT Security and at least 2 years of experience with IAM Engineering
• Must possess extensive experience with OKTA and OKTA Workflows.
• Exceptional communication, collaboration, and interpersonal skills, with the ability to effectively translate complex technical security concepts into clear and concise language.
• Excellent project management skills to oversee and drive IAM initiatives.
• Strong analytical and problem-solving skills particularly focused on authentication and authorization issues.
• Hands-on experience with Terraform and GitHub.
• Strong understanding of IAM principles, frameworks, and technologies, including SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SOAP, REST, and SCIM.
• Knowledge of information security risk management frameworks and compliance practices, including ISO 27001, SOC2 Type 2, and NIST 800-30.

About Tempus

Passionate about making a difference in the world of cancer genomics?

We're on a mission to connect an entire ecosystem to redefine how genomic data is used in clinical settings. We're looking for software engineers who are passionate about changing the status quo and bringing cancer care into the 21st century.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status

$100,000 - $145,000

The expected salary range above is applicable if the role is performed from California and may vary for other locations (Colorado, Illinois, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.

Additionally, for remote roles open to individuals in unincorporated Los Angeles - including remote roles- Tempus reasonably believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: engaging positively with customers and other employees; accessing confidential information, including intellectual property, trade secrets, and protected health information; and appropriately handling such information in accordance with legal and ethical standards. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.