Sr. Software Engineer, Identity & Access Management
CoverMyMeds21 hours ago
Base Salary
$131k - $218k/yr
Responsibilities
- Design, develop, test, and deploy secure authentication and authorization capabilities, including SSO, MFA, federation, provisioning, and identity lifecycle integrations.
- Lead application and user-population migrations from legacy authentication and directory systems to Okta or comparable identity platforms.
- Build and maintain reusable, version-controlled identity infrastructure and configuration using Terraform and Infrastructure as Code.
- Implement identity integrations using OAuth 2.0, OpenID Connect, SAML, and SCIM.
- Develop secure services, APIs, and integrations supporting authentication, authorization, provisioning, and identity workflows.
- Integrate identity controls into CI/CD pipelines with automated testing and deployment practices.
- Diagnose complex production issues involving tokens, sessions, federation, provisioning, application integrations, and access policies.
- Contribute to identity architecture, roadmap planning, legacy technology retirement, technical reviews, documentation, and operational runbooks.
- Partner with engineering, security, risk, compliance, architecture, and product teams to deliver scalable identity solutions for a regulated healthcare environment.
- Mentor engineers on secure development, identity patterns, Terraform practices, and authentication architecture.
Requirements
- A degree or equivalent and typically 7+ years of relevant experience.
- At least 5 years of professional software engineering experience owning production applications, services, platforms, or distributed systems.
- At least 2 years of hands-on identity, authentication, authorization, or security engineering experience.
- Strong programming experience in Java, C#, Python, or a comparable object-oriented or backend language.
- Production experience with identity providers such as Okta, Microsoft Entra ID, Auth0, or Ping Identity.
- Production experience with OAuth 2.0, OpenID Connect, and SAML.
- Experience migrating from LDAP, Active Directory, SiteMinder, or custom authentication services.
- Hands-on experience using Terraform to provision and manage infrastructure or platform configuration as code, including reusable modules, source control, review, testing, and deployment practices.
- Experience building or supporting REST APIs, microservices, or distributed applications in security-sensitive production environments.
- Experience with CI/CD, automated software delivery, and secure engineering practices covering authentication, authorization, secrets, sessions, or access controls.
- Preferred experience with Okta SSO, MFA, lifecycle management, provisioning, policies, application integrations, and Terraform configuration.
- Preferred experience with SCIM provisioning, AWS, Azure, GCP, Docker, Kubernetes, relational or NoSQL persistence, threat modeling, Zero Trust, least privilege, policy-based access controls, and regulated industries.
- Familiarity with HIPAA, SOC 2, or comparable security controls and an Okta or equivalent identity-platform certification is preferred.
About CoverMyMeds
CoverMyMeds builds software that streamlines prior authorization and medication access for prescribers, pharmacies, health plans, and pharmaceutical manufacturers. Its platforms integrate with EHRs and pharmacy systems to automate approvals and support patient adherence, operating on a B2B model across U.S. healthcare stakeholders. Founded in 2008 and headquartered in Columbus, OH, the company is part of McKesson Corporation.