Senior IAM & Information Security Engineer

Caris Life Sciences • Irving, TX

4d

About The Position

Caris is seeking a Senior IAM & Information Security Engineer to lead the design, implementation, and management of enterprise Identity and Access Management (IAM) solutions. The role covers the IAM lifecycle, including Joiner-Mover-Leaver processes, HR system integration, Privileged Access Management (PAM), Identity Governance, and Zero Trust. PAM is a near-term priority, and the engineer will guide adoption of new controls across development, infrastructure, and networking teams.

In a regulated healthcare and life sciences environment, the role protects sensitive patient information and supports compliance with HIPAA, SOX, SOC 2, and GDPR. The engineer collaborates across teams to meet business needs while applying security best practices, automation, and AI to modernize identity operations. The position also calls for strong information security and risk-management knowledge, leadership in resolving issues, and a focus on continuous improvement.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• At least 8 years of hands-on IAM engineering experience in mid-to-large enterprise environments.
• Strong expertise in Okta, including lifecycle management, API access, workflows, and governance features.
• Experience integrating IAM systems with HR platforms and managing user provisioning from a central source of truth.
• Deep experience with PAM tools and controls, including just-in-time access, session recording, and credential vaulting.
• Strong scripting and automation capabilities using PowerShell, Python, or JavaScript.
• Familiarity with IAM standards and protocols, including SAML, OAuth, SCIM, and OpenID Connect.
• Solid understanding of audit and compliance requirements, including SOX, SOC 2, HIPAA, and GDPR.
• Experience with Zero Trust identity architecture and adaptive authentication controls.
• Excellent problem-solving, documentation, and communication skills.
• Proficiency in Microsoft Office Suite, specifically Word, Excel, and Outlook, and general working knowledge of the Internet for business use.
• Ability to sit, stand, and/or work at a computer for long periods.
• Ability to work extended hours during implementations and on-call rotations.
• Availability for possible after-hours response to emergency issues and periodically scheduled on-call technical emergencies.

Nice To Haves

• Experience in healthcare or life sciences, including protection of PHI and other sensitive data.
• Hands-on experience implementing a PAM solution in production, including vendor evaluations or proofs of concept.
• Experience applying AI to IAM or security operations and securing AI agents and non-human identities.
• Exposure to cloud IAM services such as AWS IAM, Azure AD/Entra ID, or GCP IAM.
• Experience building automation between IAM and ITSM platforms, such as Okta and ServiceNow, using APIs and JSON.
• Knowledge of the NIST Cybersecurity Framework and Zero Trust architecture.
• ITIL or relevant certifications, such as Okta, CyberArk, or CISSP.
• Ability to mentor team members and guide stakeholders in IAM best practices.
• Self-motivation, curiosity, strong attention to detail, and ability to manage multiple priorities.

Responsibilities

• Design, implement, and maintain IAM solutions aligned with security best practices and compliance standards, including SOX, SOC 2, HIPAA, and GDPR.
• Lead Joiner-Mover-Leaver processes and HR system integrations, including source-of-truth decisions, attribute mapping, and user migrations.
• Serve as a subject matter expert for Okta Identity Governance, Workflows, MFA, SSO, and API integrations.
• Manage identity configuration as code using tools such as Terraform, Git, and CI/CD pipelines, ensuring consistent deployment and audit traceability.
• Administer and secure on-premises Active Directory and its hybrid integration with Okta and Entra ID, including OUs, groups, Group Policy, service accounts, and privileged or tiered administrator access.
• Drive evaluation, implementation, and adoption of PAM solutions, enforcing least privilege, just-in-time access, privileged account separation, and break-glass controls.
• Lead cross-team IAM projects, defining scope and milestones, coordinating dependencies, and communicating status and risks to leadership.
• Implement and support Identity Governance processes, including role modeling, entitlement management (RBAC/ABAC), access reviews, and certifications.
• Govern non-human identities, including service accounts, API keys, secrets, and AI agents, with clear ownership, least privilege, and lifecycle controls.
• Develop automated workflows and scripts using PowerShell, Python, or JavaScript, and apply AI-assisted tools to reduce manual effort in activities such as access review analysis and audit evidence preparation.
• Ensure secure, scalable application integrations using SAML, OAuth, SCIM, and OpenID Connect.
• Align IAM architecture with Zero Trust principles, including adaptive and risk-based access, device trust, and passwordless authentication such as FIDO2 and WebAuthn.
• Partner with the Information Security team on risk assessments, security policies and standards, remediation of identity-related findings, and investigations involving identities or privileged access.
• Collaborate with security and compliance teams on internal and external audits, including evidence collection, documentation, and remediation.
• Maintain technical documentation, SOPs, and architecture references, including identity platform recovery procedures.
• Troubleshoot complex IAM issues in collaboration with engineering, infrastructure, and support teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior