Staff Information Security Engineer - IntelliScript (Remote)

Milliman; United States; Remote; USD 132,000 - 250,000; Full time

Benefits offered by this job

Medical, Dental and Vision – Coverage

401(k) with company match

Discretionary Bonus Program

Paid Time Off

Holidays

Job summary

Milliman IntelliScript, a Milliman unit, seeks a Staff Information Security Engineer to strengthen our security program across cloud, product, and data. You will collaborate with Platform Engineering and Software Development teams to implement security controls, respond to threats, and drive secure SDLC practices.

You will lead IAM initiatives, monitor risk, and help maintain compliance with industry standards while supporting scalable security for SaaS offerings.

Qualifications

• 10+ years of relevant experience.
• 5+ years of experience with Identity Access Management.
• 5+ years of hands‑on technical engineering experience.
• Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity.
• Strong understanding of IAM protocols like OAuth, SAML, OIDC and LDAP.
• Experience in configuration of IAM solutions for API web and web authentication use cases.
• Experience building, supporting, and securing cloud-based web infrastructure with AWS.
• Strong understanding of Cryptography, Authentication, Authorization, Secrets Management, Data Security, Web Tech Stack, and Cloud Security.
• Experience in DevSecOps with relevant tech stack knowledge (e.g. Git, Docker, Windows, SIEM, AWS Security products, Terraform).
• Knowledge of security best practices for building web applications.
• Experience with secure coding practices and security frameworks (OWASP, NIST, CIS etc.).
• Understanding of and ability to deal with and prevent security threats.
• Working knowledge of Software Engineering and Deployments (CI/CD pipelines, SCM etc.).
• Ability to conduct security assessments of applications.

Responsibilities

• Manage and improve Identity Access Management programs.
• Improve, monitor and maintain our Information Security Program.
• Execute security initiatives related to infrastructure, product and data.
• Contribute to the strategic planning of security work, make strategic recommendations and improvements to our security.
• Work with application developers to improve the security of various product features.
• Design and implement security controls and measures to protect our application and data.
• Monitor and analyze security events and incidents and respond promptly to security breaches.
• Collaborate with development teams to integrate security best practices throughout the software development lifecycle.
• Identify and prioritize security vulnerabilities and develop strategies for mitigation.
• Proactively prepare and train developers and raise the security awareness of everyone in the organization.
• Quickly and proactively respond to incoming security threats.
• Continually assess, address and report on the levels of threat and preparedness.
• Assist in maintaining compliance with industry standards relevant to our organization.

Skills

Identity Access Management

Security engineering

Cloud security

DevSecOps

Security best practices

CI/CD

Threat detection

Security incident response

Security governance

Tools

Okta

AWS

Azure AD/Entra ID

Auth0

Ping Identity

Git

Docker

Terraform

Job description

What We Do

Milliman IntelliScript is a group of a few hundred experts in fields ranging from actuarial science to information technology to clinical practice. Together, we develop and deploy category-defining, data-driven, software-as-a-service (SaaS) products for a broad spectrum of insurance, health IT and life sciences clients. We are a business unit within Milliman, Inc., a respected consultancy with offices around the world.

Candidates who have their pick of jobs are drawn to IntelliScripts entrepreneurial and collaborative culture of innovation, excellence, exceptional customer service, balance, and transparency. Every single person has a voice in our company, and we challenge each other to push the outer limits of our full, diverse potential. And, weve shown sustained growth that ensures youll have room to grow your skillset, responsibilities, and career.

Our team is smart, down-to-earth, and ready to listen to your best ideas. We reward excellence and offer competitive compensation and benefits. Visit our LinkedIn page for a closer look at our company, and learn more about our cultural values here .

Milliman invests in skills training and career development and gives all employees access to a variety of learning and mentoring opportunities. Our growing number of Milliman Employee Resource Groups (ERGs) are employee-led communities that influence policy decisions, develop future leaders, and amplify the voices of their constituents. We encourage our employees to give back to their varied professions, including leadership in professional organizations. Please visit our website to learn more about Millimans commitments to our people, diversity and inclusion, social impact, and sustainability.

What this position entails

As a Staff Information Security Engineer on the Information Security team at Milliman IntelliScript, youll play a key role in helping us continuously improve our security programs to ensure the safety of our technology, processes and data. This role will encompass tactical and strategic work of putting forward-looking initiatives in place as well as responding to external threats on an ongoing basis, which is a great opportunity for impact across all IntelliScript. Were also modernizing and scaling quickly and are excited to bring someone onboard who can help us proactively tackle challenges – both in the day-to-day operations and anticipated future ones.

As a member of the Information Security team, you will collaborate with members of the Platform Engineering and Software Development teams to plan and implement various security initiatives. The team will look to you for your strategic expertise, reliable execution, and sound judgment to improve and maintain our security infrastructure, along with creating and improving processes for maintaining a secure product and environment.

You will be joining a team that is passionate about technology and helping pave the way for building great products together.

What you will be doing

• Manage and improve Identity Access Management programs
• Improve, monitor and maintain our Information Security Program
• Execute security initiatives related to infrastructure, product and data
• Contribute to the strategic planning of security work, make strategic recommendations and improvements to our security
• Work with application developers to improve the security of various product features
• Design and implement security controls and measures to protect our application and data
• Monitor and analyze security events and incidents and respond promptly to security breaches
• Collaborate with development teams to integrate security best practices throughout the software development lifecycle
• Identify and prioritize security vulnerabilities and develop strategies for mitigation
• Proactively prepare and train developers and raise the security awareness of everyone in the organization
• Quickly and proactively respond to incoming security threats
• Continually assess, address and report on the levels of threat and preparedness
• Assist in maintaining compliance with industry standards relevant to our organization

What we need

• 10+ years of relevant experience
• 5+ years of experience with Identity Access Management
• 5+ years of hands‑on technical engineering experience
• Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity
• Strong understanding of IAM protocols like OAuth, SAML, OIDC and LDAP
• Experience in configuration of IAM solutions for API web and web authentication use cases
• Experience building, supporting, and securing cloud-based web infrastructure with AWS
• Strong understanding of Cryptography, Authentication, Authorization, Secrets Management, Data Security, Web Tech Stack, and Cloud Security
• Experience in DevSecOps with relevant tech stack knowledge (e.g. Git, Docker, Windows, SIEM, AWS Security products, Terraform)
• Knowledge of security best practices for building web applications
• Experience with secure coding practices and security frameworks (OWASP, NIST, CIS etc.)
• Understanding of and ability to deal with and prevent security threats
• Working knowledge of Software Engineering and Deployments (CI/CD pipelines, SCM etc.)
• Ability to conduct security assessments of applications

What you bring to the table

• Demonstrates urgency and willingness to get things done
• Has a thorough understanding of the field and seeks to enhance technical expertise by staying up to date with industry trends, best practices, and emerging technologies
• Leads problem solving resolution initiatives, integrates cross-functional perspectives, and ensures sustainable outcomes
• Communicates complex information clearly and produces comprehensive documentation with minimal supervision
• Drives projects and tasks forward, making informed decisions and taking responsibility for outcomes
• Collaborates effectively with team members to overcome obstacles, meet deadlines, and achieve shared objectives
• Proactively identifies advanced learning opportunities, mentors peers, and continuously updates skills to maintain industry relevance
• Leads organizational risk management initiatives, designs advanced risk mitigation and contingency plans
• Proactively addresses issues within the team, facilitating open communication
• Takes on additional responsibilities or roles within the team, demonstrating accountability and a commitment to shared objectives
• Willingness to stay current and a commitment to professional development.

Wish list

• Continued education and/or advanced degree(s)

Industry certifications

• Experience in environments subject to HITRUST, HIPAA and/or PCI regulations
• Experience in software-as-a-service, actuarial science, and/or insurance industry

Location

The expected application deadline for this job is January 31, 2027. This position is open to remote work. Applicants must be willing to travel to the annual All Team Meeting and may be asked to travel occasionally for other meetings.

Compensation

The overall salary range for this role is $131,600 - $249,780.

• For candidates residing in: Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, Pennsylvania, Virginia, Washington, the District of Columbia, New York City, Newark, San Jose, or San Francisco the salary range is $151,340 - $249,780.
• All other locations the salary range is $131,600 - $217,200.

Milliman Benefits

• Medical, Dental and Vision – Coverage for employees, dependents, and domestic partners
• Employee Assistance Program (EAP) – Confidential support for personal and work-related challenges
• 401(k) Plan – Includes a company matching program and profit-sharing contributions
• Discretionary Bonus Program – Recognizing employee contributions
• Flexible Spending Accounts (FSA) – Pre-tax savings for dependent care, transportation, and eligible medical expenses
• Paid Time Off (PTO) – Begins accruing on the first day of work. Full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis
• Holidays – A minimum of 10 paid holidays per year
• Family Building Benefits – Includes adoption and fertility assistance
• Paid Parental Leave – Up to 11 weeks of paid leave for employees who meet eligibility criteria
• Life Insurance & AD&D – 100% of premiums covered by Milliman
• Short-Term and Long-Term Disability – Fully paid by Milliman

Equal Opportunity

All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.

#IntelliScript #LI-REMOTE #LI-LA1