Senior Identity Security Engineer

HealthVerity; Philadelphia (Philadelphia County); Hybrid; USD 145,000 - 175,000; Full time

Benefits offered by this job

Hybrid work model

In-office 3 days/week in Philadelphia

Health, dental, and vision coverage

401(k) plan and equity program

Generous PTO

Parental Leave

Mentorship program

Professional development

Job summary

HealthVerity is seeking a Senior Identity Security Engineer to own the Identity and Access Management program across workforce and customer environments. You will define, implement, and evolve identity services that enable secure access to HealthVerity's platforms and products.

In this hybrid role, you will oversee AD, Okta, Auth0, and AWS Cognito, build scalable identity architectures, and drive Zero Trust initiatives while partnering with Security, IT, Engineering, Product, and Compliance

Qualifications

• 7+ years of IAM, identity security, or security engineering experience.
• Expert-level Active Directory administration and security.
• Hands-on experience with customer identity platforms (Auth0, Cognito, Ping Identity, etc.).
• Experience with Okta environments.
• Knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, Kerberos.
• Experience implementing SSO, MFA, CA, and PAM.
• Cloud identity and AWS security services.
• HIPAA, SOC 2, HITRUST, FedRAMP, or similar compliance.
• Scripting/automation with Python, PowerShell, Terraform.

Responsibilities

• Own the architecture, engineering, and operation of HealthVerity's Identity and Access Management platforms across workforce and customer environments.
• Design, implement, and support enterprise Active Directory services and identity infrastructure.
• Design and implement scalable identity architectures using Active Directory, Okta, Auth0, AWS Cognito, and related technologies.
• Develop and maintain identity federation solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos.
• Manage and enhance workforce identity services including Active Directory, Entra ID, and Okta.
• Support and enhance customer identity platforms including Auth0 and AWS Cognito.
• Develop and maintain the IAM roadmap aligned to business growth, security requirements, and regulatory obligations.
• Develop identity-focused security monitoring, alerting, and response playbooks.
• Assist in implementing and maintaining Zero Trust security principles.
• Partner with Security, IT, Engineering, Product, and Compliance teams on strategic initiatives.

Skills

IAM strategy

Zero Trust

Security governance

Python

PowerShell

Terraform

Compliance (HIPAA, SOC 2, HITRUST, Fed

Tools

Active Directory

Okta

Auth0

AWS Cognito

SAML

OAuth 2.0

OIDC

SCIM

LDAP

Kerberos

Entra ID

Job description

• Raleigh-Durham, North Carolina

Please note: This is a hybrid role requiring 3 days in office at our Philadelphia HQ - 1818 Market Street.

ROLE OVERVIEW

As a Senior Identity Security Engineer at HealthVerity, you will serve as the technical owner for the company's Identity and Access Management program. You will define, implement, and evolve identity services that secure workforce and customer access across HealthVerity's platforms and products.

You will own critical identity technologies including Active Directory, Okta, Auth0, and AWS Cognito, ensuring secure authentication, authorization, provisioning, and lifecycle management for employees, customers, partners, and applications. Working closely with Security, IT, Engineering, and Product teams, you will build scalable identity services that support HealthVerity's growth while meeting healthcare security and compliance requirements.

This role will be instrumental in advancing Zero Trust initiatives, strengthening access governance, and ensuring the right individuals have the right access to the right resources at the right time.

KEY RESPONSIBILITIES

• Own the architecture, engineering, and operation of HealthVerity's Identity and Access Management platforms across workforce and customer environments.
• Design, implement, and support enterprise Active Directory services and identity infrastructure.
• Design and implement scalable identity architectures using Active Directory, Okta, Auth0, AWS Cognito, and related technologies.
• Develop and maintain identity federation solutions leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos.
• Manage and enhance workforce identity services including Active Directory, Entra ID, and Okta.
• Support and enhance customer identity platforms including Auth0 and AWS Cognito.
• Develop and maintain the IAM roadmap aligned to business growth, security requirements, and regulatory obligations.
• Develop identity-focused security monitoring, alerting, and response playbooks.
• Assist in implementing and maintaining Zero Trust security principles.
• Partner with Security, IT, Engineering, Product, and Compliance teams on strategic initiatives.

QUALIFICATIONS

Required

• 7+ years of experience in Identity and Access Management, Identity Security, Security Engineering, or related disciplines.
• Expert-level experience with Active Directory administration, architecture, and security.
• Hands‑on experience with customer identity platforms such as Auth0, AWS Cognito, Ping Identity, ForgeRock, or similar solutions.
• Strong experience administering and engineering Okta environments.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos.
• Experience implementing SSO, MFA, Conditional Access, and Privileged Access Management (PAM).
• Strong understanding of cloud identity and AWS security services.
• Experience supporting HIPAA, SOC 2, HITRUST, FedRAMP, or similar compliance frameworks.
• Experience with Python, PowerShell, Terraform, or similar automation technologies.

Preferred

• Experience with Entra ID, Identity Governance and Administration (IGA), and Zero Trust architectures preferred.
• Healthcare industry experience is a plus.

Base salary for the role is commensurate with experience and can range between $145,000 - 175,000 + annual bonus opportunity.

Hiring Locations

Our main office is located in Center City, Philadelphia, where we operate on a hybrid model with in‑office work required three days a week for local employees. We believe collaboration is most effective when teams come together, which is why we prioritize hiring in the Philadelphia area.

For certain roles, we also hire from hub locations—regions where we have an established presence with multiple team members working remotely. While these employees primarily work from home, we bring them together in person at least once a year for team‑building, collaboration, and strategic planning.

Due to tax and labor regulations, we can only hire from specific states. Remote work is supported in the following key hub locations and approved states:

Hub Locations

• Philadelphia, Pennsylvania
• Boston, Massachusetts
• New York City, New York
• Baltimore, Maryland
• Washington, D.C.
• Charlotte, North Carolina
• Raleigh-Durham, North Carolina
• Atlanta, Georgia
• Chicago, Illinois

Approved States for Remote Work

CT, DE, FL, GA, IL, IN, MA, MD, MI, NC, NJ, NY, OH, PA, TN, and VA.

About HealthVerity

HealthVerity is the leader in privacy-protected real-world data exchange, transforming how healthcare and life sciences organizations connect and analyze disparate patient data. By enabling access to the industry’s largest RWD ecosystem, HealthVerity supports critical applications in clinical development, commercial strategy, regulatory decision‑making, and public health. To learn more about HealthVerity, visit healthverity.com.

Why you'll love working here

We are making a difference

Our technology is at the forefront of some of the biggest healthcare challenges in the world.

We are one team

Our people define our culture and always will. We take time out to celebrate each other, and acknowledge the value that each of us adds towards our greater mission. Come share all you have to offer.

We are learners

Every team member is continually learning, no matter if we've been in a role for one year or much longer. We are committed to learning and implementing what is best for our clients, partners, and each other.

Benefits & Perks

Our benefits package is thoughtfully designed to support and enrich the experience of our full‑time employees, with eligibility limited to those in permanent positions.

• Compensation: competitive base salary & annual bonus opportunity (for non‑commissioned roles)
• Benefits: We offer health, dental, and vision coverage starting on day 1. We also offer a 401(k) plan and an equity program, with new hire equity grants beginning at the Director level and above.
• Flexible location: Remote workdays and 3 days a week of in‑office collaboration for team members in the Philadelphia area. Check location requirements with the recruiting team.
• Generous PTO: Take time off as needed, targeted at 4 weeks per year, including vacation, personal and sick time, plus paid parental leave.
• Parental Leave: 12 weeks paid leave for childbearing, surrogacy, and adoption; 6 weeks for non-childbearing parents.
• Comprehensive and individualized onboarding: mentorship program, departmental talks, and a library of resources are available beginning day 1 for each new team member to minimize the stress of starting a new job.
• Professional development: biweekly 1:1s, hands‑on leadership that is goal‑and‑growth‑oriented for each team member, and an annual budget to support professional development pursuits

We believe incorporating different ideas, perspectives and backgrounds make us stronger and encourages an environment where ageism, racism, sexism, ableism, homophobia, transphobia or any other form of discrimination are not tolerated. All qualified job applicants will be given consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability. At HealthVerity, we’re working towards an innovative and connected future for healthcare data and believe the future is better together. We can only do that if everyone has a seat at the table.

If you require a reasonable accommodation in completing this application, interviewing, completing any pre‑employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [e-mail].

Remote opportunities are not available in all areas and require team members to work from a fixed location due to tax and labor law implications - specific questions about remote positions can be discussed during the interview process with your recruiter.