Staff Security Engineer — IAM & AI-Enabled Platform

Tempus AI; Aliso Viejo (CA); Remote; USD 160,000 - 220,000; Full time

Job summary

Tempus Staff Software Engineer, Security will drive architectural initiatives for Tempus' Security stack, setting the technical vision and leading build-vs-buy decisions, IAM evolution, and cross-functional engineering best practices.

Position focuses on enabling core identity and authentication (SSO, OAuth, SAML, SCIM) across a microservices architecture, securing patient data, and guiding agentic AI infrastructure with secure event-based systems.

Qualifications

• Experience leading security engineering initiatives and architecture.
• Proven ability to implement identity standards (OAuth, SAML, SCIM).
• Experience securing distributed, event-driven microservices at scale.
• Familiarity with cloud providers and security tooling.

Responsibilities

• Lead security architecture decisions and best practices across services.
• Secure identity management, authorization, and observability in the platform.
• Collaborate with cross-functional teams to implement internal security standards.
• Mentor engineers and communicate complex security concepts clearly.

Skills

IAM

SSO

Security leadership

Distributed systems

Cross-functional collaboration

Cloud security

Identity standards

RBAC/ABAC

Agentic AI security

Multi-language security stack

Tools

Docker

Terraform

Kubernetes

Auth0

Okta

Microsoft Entra

Ping Identity

OAuth

SAML

SCIM

AWS

Google Cloud

Node.js

TypeScript

Python

Job description

Tempus Staff Software Engineer, Security will drive architectural initiatives for Tempus' Security stack, setting the technical vision and leading build-vs-buy decisions, IAM evolution, and cross-functional engineering best practices.

Position focuses on enabling core identity and authentication (SSO, OAuth, SAML, SCIM) across a microservices architecture, securing patient data, and guiding agentic AI infrastructure with secure event-based systems.