Staff Software Engineer, Identity & Security — Remote

HealthEquity, Inc.; Draper (UT); Remote; USD 144,000 - 238,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Education tuition assistance

Gym and fitness reimbursement

Wellness program incentives

Job summary

HealthEquity, Inc. is hiring a Senior Identity Engineer to own the customer identity stack, from design to production. You will implement passkey-based authentication, risk-based verification, and scalable APIs across member, employer, and partner ecosystems.

You will influence security standards, work with security/compliance, and help steer the migration to a next‑gen mobile app. This remote role supports US-based operations with occasional travel.

Qualifications

• 7+ years of software engineering, with at least 3 years in authentication or security-sensitive systems in production.
• Hands-on knowledge of OIDC, OAuth2, SAML, FIDO2 and WebAuthn, including failure modes and attacks.
• Strong TypeScript and Node (NestJS) and working C# and .NET; read and modify both codebases.
• Experience with at-scale customer identity platforms and an informed build-vs-buy view.
• Cloud-native delivery on Azure; Kubernetes and Helm, API gateways, key vaults, and CI/CD pipelines.

Responsibilities

• Own technical decisions across the customer identity stack: authentication, authorization, session management, and the OIDC/OAuth2/SAML flows for member-facing apps.
• Build services behind them end to end, including passkey registration/sign-in, verification, and APIs connecting platforms.
• Own authentication journeys from design to production telemetry, including identity verification with document and selfie checks and risk signals.
• Set standards for secure credential handling and token/session lifecycle; partner with Security and Compliance.
• Extend non-member authentication for employers, brokers, and partners; manage admin tooling.
• Build the identity layer for a future mobile app: token exchange, session, device trust, GraphQL/REST endpoints.
• Lead platform consolidation: select/open-source CIAM stack; plan credential migrations.
• Collaborate with fraud team to wire risk signals into login paths.
• Instrument delivery with dashboards, alerts, and monitoring to preempt issues.
• Write architecture notes and runbooks to scale the team.

Skills

OIDC / OAuth2 / SAML

FIDO2 / WebAuthn

TypeScript / NestJS

C# / .NET

Cloud-native Azure

Kubernetes / Helm

GraphQL / REST API design

Security engineering

Threat modeling

Credential handling security

Tools

Azure Kubernetes Service

Key Vaults

CI/CD pipelines

PostgreSQL

Job description

HealthEquity, Inc. is hiring a Senior Identity Engineer to own the customer identity stack, from design to production. You will implement passkey-based authentication, risk-based verification, and scalable APIs across member, employer, and partner ecosystems.

You will influence security standards, work with security/compliance, and help steer the migration to a next‑gen mobile app. This remote role supports US-based operations with occasional travel.