Sr Cybersecurity Engineer

Fairview Health Services; Minneapolis (MN); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

PTO and Sick leave

Job summary

Fairview Health Services in Minneapolis seeks a Senior Cybersecurity Engineer focused on CIAM to design, implement and secure patient identity platforms using Okta CIAM, with emphasis on authentication, identity proofing and consent management.

You will collaborate with Digital Product, Engineering, Compliance, and Clinical teams to deliver scalable, compliant security solutions for ePHI access and HIPAA readiness, balancing usability with strong protections in a healthcare environment.

Qualifications

• Bachelor’s degree in computer science or related field or equivalent experience.
• 10+ years in IT with progressive responsibilities.
• 5+ years hands-on Okta CIAM implementations.
• Experience with MyChart or patient-facing identity platforms.
• Deep knowledge of OAuth 2.0, OIDC, SAML, MFA and API security.
• Experience securing REST APIs and microservices in healthcare.
• HIPAA compliance experience and audits.
• Agile project management experience.
• Experience with Azure, AAD, AAD Connect, ADFS, SailPoint ISC and Office 365.
• Ability to script (PowerShell, VBS) and document designs clearly.
• Experience with identity management tools such as SailPoint.
• Strong communication and collaboration skills.
• Ability to operate in high-availability healthcare environments.

Responsibilities

• Lead design, implementation and security architecture of CIAM patient identity platforms.
• Design secure authentication for portals, apps, telehealth and billing systems.
• Architect RBAC and claims-based authorization models.
• Secure APIs using OAuth 2.0 and OIDC; integrate with EHR/CRM systems.
• Ensure HIPAA/HITRUST alignment and regulatory compliance.
• Mentor team members and drive security program improvements.

Skills

CIAM

Okta CIAM

OAuth 2.0

OIDC

SAML

adaptive MFA

API security

REST APIs

SailPoint

HIPAA

Agile

Azure

Azure AD

ADFS

Office 365

PowerShell

VBS

Visio

Documentation

Education

Bachelor’s degree in computer science or related field

Tools

SailPoint ISC

Azure AD (AAD)

AAD Connect

ADFS

Office 365

Visio

Job description

Job Overview

Senior Cybersecurity Engineer, CIAM is responsible for designing, developing, scripting, configuring, testing and maintaining complex Cybersecurity and Risk management tools and technologies for M Health Fairview. This highly experienced Senior Cybersecurity IAM Engineer to lead the design, implementation, and security architecture of our patient portal digital identity platform. This role focuses on building and securing patient-facing authentication, identity proofing, consent management, and protected access to electronic health information.

The ideal candidate brings deep expertise in Okta Customer Identity Access Management (CIAM) and a strong background in healthcare security. This candidate will partner with Digital Product, Application Development, Compliance, and Clinical Informatics teams to deliver a secure, scalable, and frictionless patient identity experience.

Job Expectations

Patient Digital Identity Architecture:

• Design and implement secure patient identity solutions using Okta CIAM.
• Architect authentication for patient portals, mobile health apps, telehealth platforms, and billing systems.
• Experience with SailPoint and/or other IDM platforms
• Implement password‑less authentication and adaptive MFA.
• Deep understanding of digital patient experience
• Ability to balance usability and strong security controls

Patient Registration & Identity Proofing:

• Design secure self‑service registration workflows.
• Implement identity proofing and fraud prevention controls.
• Build secure account recovery processes.

Secure Access to ePHI:

• Architect access controls aligned with HIPAA Security Rule.
• Implement role‑based and claims‑based authorization models.
• Design step‑up authentication for sensitive transactions.

API & Application Integration:

• Secure APIs using OAuth 2.0 and OIDC.
• Integrate CIAM platform with EHR, MyChart, CRM, billing, and telehealth systems.
• SCIM 2.0

Compliance & Monitoring:

• Ensure HIPAA, HITRUST, and regulatory compliance.
• Monitor identity‑based threats and integrate logs with SIEM platforms.

Lead complex projects related to information security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies. Assure the implementation of appropriate security configurations or re‑configurations and work with appropriate teams to execute them as required.

• Lead complex projects related to information security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies. Assure the implementation of appropriate security configurations or re‑configurations and work with appropriate teams to execute them as required.

Foster a culture of improvement, efficiency gains and innovative thinking.

• Foster a culture of improvement, efficiency gains and innovative thinking.

Coach and mentor team members as needed. Adapt and embrace change and demonstrate flexibility in taking up and fulfilling other duties as assigned.

• Coach and mentor team members as needed. Adapt and embrace change and demonstrate flexibility in taking up and fulfilling other duties as assigned.

Organization Expectations

• Demonstrates ability to provide service adjusting approaches to reflect developmental level and cultural differences of population served
• Partners with patient care giver in care/decision making.
• Communicates in a respective manner.
• Ensures a safe, secure environment.
• Fulfill all organizational requirements
• Completes all required learning relevant to the role
• Complies with and maintains knowledge of all relevant laws, regulations, policies, procedures and standards.
• Fosters a culture of improvement, efficiency and innovative thinking.
• Performs other duties as assigned

Minimum Qualifications

Required

• Bachelor’s degree in computer science, Computer Engineering, Technology Information Systems, Engineering or related technical discipline or combination of relevant experience/education.
• 10+ years of cumulative experience in Information Technology with progressive responsibility.
• 5+ years of hands‑on experience with Okta (preferably CIAM implementations).
• Experience designing customer‑facing or patient‑facing identity platforms such as MyChart
• Deep knowledge of OAuth 2.0, OIDC, SAML, adaptive MFA, and API security.
• Experience securing REST APIs and microservices architectures.
• Experience in healthcare or other regulated environments.
• Experience supporting HIPAA compliance and audits.
• Ability to thrive in a sense‑of‑urgency environment and leverage best practices
• Proficiency in Agile project management methodology.
• Hands‑on experience with Microsoft Azure, Azure AD (AAD), AAD Connect, ADFS, SailPoint ISC, and Office 365
• Ability to author and edit scripts, such as PowerShell, VBS, or similar
• Experience with any Identity Management and Access Governance tools such as SailPoint, including custom development.
• Expert ability to use Visio and infographic based visual aids in articulating solution design, integration, onboarding of applications.
• Excellent documentation and communication skills
• Experience collaborating with Digital Product, Engineering, Privacy, and Clinical teams
• Ability to operate in high‑availability healthcare environments

Language & Communication Skills

• Ability to effectively communicate both verbally and written with all levels within the organization
• Ability to explain technical concepts and adjust messaging based on the audience, including non‑technical groups
• Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills
• Ability to work well within a team environment, as well as independently

Preferred

• Bachelor’s degree or higher in Computer Science, Computer Engineering, Technology Information Systems Engineering or related technical discipline
• Experience with patient portals, digital front door initiatives, and cloud platforms (Azure/AWS)
• Experience designing identity solutions for high‑scale environments (100k+ users
• Okta Certified Administrator or Consultant.
• CISSP, CISM, or HCISPP certification.

Benefit Overview

Fairview offers a generous benefit package including but not limited to

• medical
• dental
• vision plans
• life insurance
• short‑term and long‑term disability insurance
• PTO and Sick