At Caris, we understand that cancer is an ugly word-a word no one wants to hear, but one that connects us all. That's why we're not just transforming cancer care-we're changing lives.We introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day: "What would I do if this patient were my mom?" That question drives everything we do.
But our mission doesn't stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare-driven by innovation, compassion, and purpose.
Join us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.Position SummaryWe are seeking a Senior IAM & Information Security Engineer with deep, hands-on experience to lead the design, implementation, and management of enterprise-level Identity and Access Management (IAM) solutions. This role spans the full IAM lifecycle, from Joiner-Mover-Leaver (JML) processes and HR system integration to Privileged Access Management (PAM), Identity Governance (IG), and Zero Trust. PAM is a key near-term priority, and the ideal candidate will drive it across development, infrastructure, and networking teams, building consensus to adopt new controls.
Operating in a regulated healthcare and life sciences environment, the role protects sensitive patient data (PHI) and ensures IAM solutions are secure, reliable, and compliant with standards such as HIPAA, SOX, SOC 2, and GDPR. The engineer will collaborate with cross-functional teams to address business requirements while adhering to security best practices and using automation and AI to modernize identity operations. A strong understanding of information security principles, risk management frameworks, and leadership in addressing issues and driving improvements is essential for this role.
Job Responsibilities- Design, implement, and maintain IAM solutions aligned with security best practices and compliance standards (SOX, SOC 2, HIPAA, GDPR).
- Lead JML processes and HR system integration (e.g., Workday), including source of truth, attribute mapping, and user migrations.
- Serve as subject matter expert for Okta, including Identity Governance, Workflows, MFA, SSO, and API integrations.
- Manage identity configuration as code (e.g., Terraform, Git, CI/CD pipelines) to version, review, and deploy Okta and IAM changes consistently and with full audit traceability.
- Administer and secure on-premises Active Directory and its hybrid integration with Okta and Entra ID, including OUs, groups, Group Policy, service accounts, and privileged/tiered admin access.
- Drive the evaluation, implementation, and adoption of PAM solutions (e.g., CyberArk, BeyondTrust, Delinea, StrongDM), enforcing least privilege, just-in-time access, privileged account separation, and break-glass controls.
- Lead cross-team IAM projects end to end, defining scope and milestones, coordinating dependencies, and keeping leadership informed of status and risks.
- Implement and support Identity Governance processes, including role modeling, entitlement management (RBAC/ABAC), access reviews, and certifications.
- Govern non-human identities (service accounts, API keys, secrets, and AI agents) with clear ownership, least privilege, and lifecycle controls.
- Develop automated workflows and scripts (PowerShell, Python, JavaScript) and apply AI-assisted tools where they reduce manual effort, such as access review analysis and audit evidence preparation.
- Ensure secure, scalable application integrations using SAML, OAuth, SCIM, and OpenID Connect.
- Align IAM architecture with Zero Trust principles, including adaptive and risk-based access, device trust, and passwordless authentication (FIDO2, WebAuthn).
- Partner with the Information Security team on risk assessments, security policies and standards, and remediation of identity-related findings, and support investigations involving identities or privileged access.
- Collaborate with security and compliance teams to support internal and external audits, including evidence collection, documentation, and remediation.
- Maintain clear technical documentation, SOPs, and architecture references, including identity platform recovery procedures.
- Troubleshoot complex IAM issues, working cross-functionally with engineering, infrastructure, and support teams.
Required Qualifications- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
- 8+ years of hands-on IAM engineering experience in mid-to-large enterprise environments.
- Strong expertise in Okta, including lifecycle management, API access, workflows, and governance features.
- Proven experience integrating IAM systems with HR platforms and managing user provisioning from a central source of truth.
- Deep experience with PAM tools and controls, including JIT access, session recording, and credential vaulting.
- Strong scripting/automation capabilities (PowerShell, Python, or JavaScript).
- Familiarity with IAM standards and protocols: SAML, OAuth, SCIM, OpenID Connect.
- Solid understanding of audit and compliance requirements (SOX, SOC 2, HIPAA, GDPR).
- Experience with Zero Trust identity architecture and adaptive authentication controls.
- Excellent problem-solving, documentation, and communication skills.
- Proficient in Microsoft Office Suite, specifically Word, Excel, Outlook, and general working knowledge of Internet for business use.
Preferred Qualifications- Experience in healthcare or life sciences, including protection of PHI and other sensitive data.
- Hands-on experience implementing a PAM solution in production, including vendor evaluations or POVs.
- Experience applying AI to IAM or security operations and securing AI agents and non-human identities.
- Exposure to cloud IAM services (e.g., AWS IAM, Azure AD/Entra ID, Google Cloud Platform IAM).
- Experience building automation between IAM and ITSM platforms (e.g., Okta and ServiceNow) using APIs and JSON.
- Knowledge of the NIST Cybersecurity Framework and Zero Trust architecture.
- ITIL or relevant certifications (e.g., Okta, CyberArk, CISSP).
- Ability to mentor team members and guide stakeholders in IAM best practices.
- Self-motivated and curious, with strong attention to detail and the ability to manage multiple priorities.
Physical Demands- Must possess the ability to sit, stand, and/or work at a computer for long periods of time.
- Ability to work extended hours during implementations and on-call rotations.
Training- All job specific, safety, and compliance training are assigned based on the job functions associated with this employee.
Other- Job may require after-hours response to emergency issues.
- Periodically scheduled on-call may require after-hours response for technical emergencies not explicitly related to assigned job responsibilities.
- Other duties as assigned.
Conditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check ( applicable for certain positions) and reference verification.
This job description reflects management's assignment of essential functions. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
Caris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.
.png?format=webp)
