Senior IAM & Information Security Engineer

Caris Life Sciences; Irving (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Caris Life Sciences in Irving, TX is seeking a Senior IAM & Information Security Engineer to design, implement, and manage enterprise IAM, including JML, PAM, and zero trust across HR systems and applications.

You will work with Okta, AD, Entra ID, and security teams to enforce least privilege, build automation, and support audits under HIPAA, SOC 2, and GDPR requirements.

Qualifications

• 8+ years hands-on IAM engineering in large enterprise environments.
• Strong Okta expertise: lifecycle management, workflows, governance.
• Experience with HR systems integration and JML processes.
• Deep PAM knowledge: JIT access, vaulting, session recording.
• Automation: PowerShell, Python, JavaScript; IaC practices.
• Familiar with SAML, OAuth, SCIM, OIDC; audit/compliance focus.

Responsibilities

• Design, implement, and maintain IAM solutions with compliance alignment.
• Lead Joiner-Mover-Leaver processes, HR system integration (Workday).
• Own PAM, Identity Governance, and zero-trust initiatives.
• Manage IAM as code; versioning, auditing, and change control.
• Collaborate with security and IT teams; support audits and investigations.
• Develop automation scripts and AI-assisted workflows to reduce manual effort.

Skills

IAM engineering

Okta

PAM

Scripting

PowerShell

Python

JavaScript

Terraform

CI/CD

Zero Trust

HIPAA

SOX

SCIM

OAuth

Education

Bachelor's degree in Information Systems or CS

Tools

AD/Entra ID

Workday

Okta Admin Console

Terraform

Git & CI/CD tools

Job description

Irving, TX - 75039

Full time

JR105627

At Caris, we understand that cancer is an ugly word—a word no one wants to hear, but one that connects us all. That’s why we’re not just transforming cancer care—we’re changing lives.

We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting‑edge molecular science and AI, we ask ourselves every day: “What would I do if this patient were my mom?” That question drives everything we do.

But our mission doesn’t stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare—driven by innovation, compassion, and purpose.

Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.

Position Summary

We are seeking a Senior IAM & Information Security Engineer with deep, hands‑on experience to lead the design, implementation, and management of enterprise‑level Identity and Access Management (IAM) solutions. This role spans the full IAM lifecycle, from Joiner‑Mover‑Leaver (JML) processes and HR system integration to Privileged Access Management (PAM), Identity Governance (IG), and Zero Trust. PAM is a key near‑term priority, and the ideal candidate will drive it across development, infrastructure, and networking teams, building consensus to adopt new controls.

Operating in a regulated healthcare and life sciences environment, the role protects sensitive patient data (PHI) and ensures IAM solutions are secure, reliable, and compliant with standards such as HIPAA, SOX, SOC 2, and GDPR. The engineer will collaborate with cross‑functional teams to address business requirements while adhering to security best practices and using automation and AI to modernize identity operations. A strong understanding of information security principles, risk management frameworks, and leadership in addressing issues and driving improvements is essential for this role.

Job Responsibilities

• Design, implement, and maintain IAM solutions aligned with security best practices and compliance standards (SOX, SOC 2, HIPAA, GDPR).
• Lead JML processes and HR system integration (e.g., Workday), including source of truth, attribute mapping, and user migrations.
• Serve as subject matter expert for Okta, including Identity Governance, Workflows, MFA, SSO, and API integrations.
• Manage identity configuration as code (e.g., Terraform, Git, CI/CD pipelines) to version, review, and deploy Okta and IAM changes consistently and with full audit traceability.
• Administer and secure one‑premises Active Directory and its hybrid integration with Okta and Entra ID, including OUs, groups, Group Policy, service accounts, and privileged/tiered admin access.
• Drive the evaluation, implementation, and adoption of PAM solutions (e.g., CyberArk, BeyondTrust, Delinea, StrongDM), enforcing least privilege, just‑in‑time access, privileged account separation, and break‑glass controls.
• Lead cross‑team IAM projects end to end, defining scope and milestones, coordinating dependencies, and keeping leadership informed of status and risks.
• Implement and support Identity Governance processes, including role modeling, entitlement management (RBAC/ABAC), access reviews, and certifications.
• Govern non‑human identities (service accounts, API keys, secrets, and AI agents) with clear ownership, least privilege, and lifecycle controls.
• Develop automated workflows and scripts (PowerShell, Python, JavaScript) and apply AI‑assisted tools where they reduce manual effort, such as access review analysis and audit evidence preparation.
• Ensure secure, scalable application integrations using SAML, OAuth, SCIM, and OpenID Connect.
• Align IAM architecture with Zero Trust principles, including adaptive and risk‑based access, device trust, and passwordless authentication (FIDO2, WebAuthn).
• Partner with the Information Security team on risk assessments, security policies and standards, and remediation of identity‑related findings, and support investigations involving identities or privileged access.
• Collaborate with security and compliance teams to support internal and external audits, including evidence collection, documentation, and remediation.
• Maintain clear technical documentation, SOPs, and architecture references, including identity platform recovery procedures.
• Troubleshoot complex IAM issues, working cross‑functionally with engineering, infrastructure, and support teams.

Required Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• 8+ years of hands‑on IAM engineering experience in mid‑to‑large enterprise environments.
• Strong expertise in Okta, including lifecycle management, API access, workflows, and governance features.
• Proven experience integrating IAM systems with HR platforms and managing user provisioning from a central source of truth.
• Deep experience with PAM tools and controls, including JIT access, session recording, and credential vaulting.
• Strong scripting/automation capabilities (PowerShell, Python, or JavaScript).
• Familiarity with IAM standards and protocols: SAML, OAuth, SCIM, OpenID Connect.
• Solid understanding of audit and compliance requirements (SOX, SOC 2, HIPAA, GDPR).
• Experience with Zero Trust identity architecture and adaptive authentication controls.
• Excellent problem‑solving, documentation, and communication skills.
• Proficient in Microsoft Office Suite, specifically Word, Excel, Outlook, and general working knowledge of Internet for business use.

Preferred Qualifications

• Experience in healthcare or life sciences, including protection of PHI and other sensitive data.
• Hands‑on experience implementing a PAM solution in production, including vendor evaluations or POVs.
• Experience applying AI to IAM or security operations and securing AI agents and non‑human identities.
• Exposure to cloud IAM services (e.g., AWS IAM, Azure AD/Entra ID, GCP IAM).
• Experience building automation between IAM and ITSM platforms (e.g., Okta and ServiceNow) using APIs and JSON.
• Knowledge of the NIST Cybersecurity Framework and Zero Trust architecture.
• ITIL or relevant certifications (e.g., Okta, CyberArk, CISSP).
• Ability to mentor team members and guide stakeholders in IAM best practices.
• Self‑motivated and curious, with strong attention to detail and the ability to manage multiple priorities.

Physical Demands

• Must possess the ability to sit, stand, and/or work at a computer for long periods of time.
• Ability to work extended hours during implementations and on‑call rotations.

Training

• All job specific, safety, and compliance training are assigned based on the job functions associated with this employee.

Other

• Job may require after‑hours response to emergency issues.
• Periodically scheduled on‑call may require after‑hours response for technical emergencies not explicitly related to assigned job responsibilities.
• Other duties as assigned.

Conditions of Employment: Individual must successfully complete pre‑employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.

This job description reflects management’s assignment of essential functions. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.

Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.

Caris Life Sciences is a leading innovator in molecular science and artificial intelligence focused on fulfilling the promise of precision medicine through quality and innovation.

Caris is committed to quality and excellence at our state‑of‑the‑art laboratories. Learn more about our tissue lab and the advanced technologies that are helping improve the lives of cancer patients.