Staff Security Engineer - IAM

A staff security engineer at Aledade who leads the design and running of identity security services, setting identity strategy and controls that protect networks, systems and applications and mentoring newer engineers. The work covers least-privilege cloud IAM across AWS, Entra ID or GCP with RBAC and ABAC, federation and lifecycle automation with SAML, OIDC and OAuth, SSO, MFA and just-in-time access, infrastructure-as-code automation for provisioning and drift detection, and governance of non-human identities such as service accounts, keys, certificates and AI agent permissions.

Aledade wants a relevant degree and eight or more years of software or security engineering in cloud-native environments; SPIFFE/SPIRE, zero-trust, AI threat modelling and healthcare experience are pluses, as are CISSP or OSCP.