IAM Engineer | Okta Security for Precision Medicine

Tempus AI; Redwood City (CA); On-site; USD 100,000 - 145,000; Full time

Job summary

Tempus is seeking an IAM Engineer in California to design, deploy, and operate secure authentication and authorization solutions for real-world data workflows. You’ll work across on-premise and cloud environments, focusing on OKTA and its workflows, SAML 2.0 and OpenID Connect to protect patient data and ensure compliance.

You will collaborate with security, IT, and product teams to implement scalable IAM strategies, manage risks, and maintain robust access controls, while contributing to

Qualifications

• 3+ years in IT security with at least 2 years in IAM engineering.
• Extensive experience with OKTA and OKTA Workflows.
• Excellent communication, collaboration, and project management skills.
• Hands-on with Terraform and GitHub; strong knowledge of SAML 2.0, OAuth 2.0, and OpenID Connect.
• Familiarity with ISO 27001, SOC2 Type 2, and NIST 800-30.

Responsibilities

• Practical experience with authentication and authorization protocols.
• Proven design, implementation, and maintenance of comprehensive IAM solutions across multiple domains including OKTA and workflows.
• Identify, assess, and mitigate IAM-related security risks; address threats and vulnerabilities.
• Collaborate with IT and business units to promote IAM awareness and integrate IAM best practices into operations.

Skills

IAM Engineering

OKTA

OKTA Workflows

Security risk assessment

SAML 2.0

OAuth 2.0

OpenID Connect

Terraform

GitHub

REST

LDAP

Tools

Terraform

GitHub

Job description

Tempus is seeking an IAM Engineer in California to design, deploy, and operate secure authentication and authorization solutions for real-world data workflows. You’ll work across on-premise and cloud environments, focusing on OKTA and its workflows, SAML 2.0 and OpenID Connect to protect patient data and ensure compliance.

You will collaborate with security, IT, and product teams to implement scalable IAM strategies, manage risks, and maintain robust access controls, while contributing to