2 months ago
Remote, WorldwideSenior
Responsibilities
- Architect and manage Okta and Workday-driven HR provisioning, attribute mapping, and Joiner/Mover/Leaver lifecycle automation
- Engineer SSO using SAML 2.0, OIDC, and OAuth 2.0, along with SCIM provisioning for Salesforce, Google Workspace, and other enterprise applications
- Design least-privilege AWS identity policies, cross-account role assumption, Okta federation, and AWS SSO/Identity Center
- Implement policy-based access control with Open Policy Agent and Rego for cloud-native applications
- Govern autonomous AI workflows by assigning identities to AI models, controlling API access, and enforcing sandboxing
- Manage service accounts, OAuth tokens, API keys, and X.509 certificates to prevent machine-identity secret sprawl
- Implement contextual access and device-trust controls using MDM telemetry and device certificates for macOS and Windows endpoints
- Mentor junior engineers, conduct architecture reviews, and create documentation and runbooks
Requirements
- 5+ years of hands-on experience engineering, deploying, and managing enterprise IAM environments, with deep Okta expertise
- Strong hands-on experience with AWS IAM, Open Policy Agent, Rego, and zero-trust cloud architectures
- Experience discovering, managing, and rotating machine identities and securing programmatic AI workflows
- Advanced experience integrating Workday with identity providers and managing macOS and Windows fleet authentication
- Understanding of access control principles in regulated healthcare or PBM environments, including HIPAA, privacy, continuous access reviews, and audit logging
- Ability to maintain detailed documentation and translate complex identity concepts into scalable, automated solutions
- Okta, AWS, or SANS identity certifications are preferred
- Experience mapping identity controls to ISO, SOC 2, HITRUST, and privacy regulation frameworks is preferred
Benefits
- Medical, pharmacy, dental, vision, life, and AD&D insurance
- Flexible Spending Benefits
- 401(k) Retirement Savings Program
- Short-term and long-term disability
- Discretionary paid time off and paid company holidays
- Wellness and commuter benefits
- Paid parental leave and Employee Assistance Program
- Well-stocked office kitchens
- Professional development and training opportunities
- The role states both that the ideal candidate is commutable to the Lehi, Utah office and available on-site Monday through Friday, and that the location is US-Remote
About SmithRx
Our mission is to reduce the cost and complexity of pharmacy benefits for America’s employers and patients. Pharmacy benefits are broken. The overly complex monopolies built by big PBMs only serve their bottom lines. SmithRx is a transparent, pass-through pharmacy benefits manager for self-insured employers. We operate independently from insurance companies and pharmacies so that our incentives are 100% aligned with our customers. Our modern technology and innovative cost savings programs connect our members to the lowest cost drugs. Get in touch with us to today to learn how to save on your pharmacy spend!