Senior InfoSec Engineer – IAM & Cloud (Remote)

Milliman; United States; Remote; USD 132,000 - 250,000; Full time

Benefits offered by this job

Medical, Dental and Vision – Coverage

401(k) with company match

Discretionary Bonus Program

Paid Time Off

Holidays

Job summary

Milliman IntelliScript, a Milliman unit, seeks a Staff Information Security Engineer to strengthen our security program across cloud, product, and data. You will collaborate with Platform Engineering and Software Development teams to implement security controls, respond to threats, and drive secure SDLC practices.

You will lead IAM initiatives, monitor risk, and help maintain compliance with industry standards while supporting scalable security for SaaS offerings.

Qualifications

• 10+ years of relevant experience.
• 5+ years of experience with Identity Access Management.
• 5+ years of hands‑on technical engineering experience.
• Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity.
• Strong understanding of IAM protocols like OAuth, SAML, OIDC and LDAP.
• Experience in configuration of IAM solutions for API web and web authentication use cases.
• Experience building, supporting, and securing cloud-based web infrastructure with AWS.
• Strong understanding of Cryptography, Authentication, Authorization, Secrets Management, Data Security, Web Tech Stack, and Cloud Security.
• Experience in DevSecOps with relevant tech stack knowledge (e.g. Git, Docker, Windows, SIEM, AWS Security products, Terraform).
• Knowledge of security best practices for building web applications.
• Experience with secure coding practices and security frameworks (OWASP, NIST, CIS etc.).
• Understanding of and ability to deal with and prevent security threats.
• Working knowledge of Software Engineering and Deployments (CI/CD pipelines, SCM etc.).
• Ability to conduct security assessments of applications.

Responsibilities

• Manage and improve Identity Access Management programs.
• Improve, monitor and maintain our Information Security Program.
• Execute security initiatives related to infrastructure, product and data.
• Contribute to the strategic planning of security work, make strategic recommendations and improvements to our security.
• Work with application developers to improve the security of various product features.
• Design and implement security controls and measures to protect our application and data.
• Monitor and analyze security events and incidents and respond promptly to security breaches.
• Collaborate with development teams to integrate security best practices throughout the software development lifecycle.
• Identify and prioritize security vulnerabilities and develop strategies for mitigation.
• Proactively prepare and train developers and raise the security awareness of everyone in the organization.
• Quickly and proactively respond to incoming security threats.
• Continually assess, address and report on the levels of threat and preparedness.
• Assist in maintaining compliance with industry standards relevant to our organization.

Skills

Identity Access Management

Security engineering

Cloud security

DevSecOps

Security best practices

CI/CD

Threat detection

Security incident response

Security governance

Tools

Okta

AWS

Azure AD/Entra ID

Auth0

Ping Identity

Git

Docker

Terraform

Job description

Milliman IntelliScript, a Milliman unit, seeks a Staff Information Security Engineer to strengthen our security program across cloud, product, and data. You will collaborate with Platform Engineering and Software Development teams to implement security controls, respond to threats, and drive secure SDLC practices.

You will lead IAM initiatives, monitor risk, and help maintain compliance with industry standards while supporting scalable security for SaaS offerings.