Senior IAM & Information Security Engineer

Caris Life Sciences•Irving, TX

About The Position

Caris Life Sciences is seeking a Senior IAM & Information Security Engineer to lead the design, implementation, and management of enterprise Identity and Access Management solutions. The role spans the full IAM lifecycle, including Joiner-Mover-Leaver processes, HR system integration, Privileged Access Management, Identity Governance, and Zero Trust. PAM is a near-term priority, and the engineer will drive adoption across development, infrastructure, and networking teams. In a regulated healthcare and life sciences environment, the position protects sensitive patient information and ensures IAM solutions meet security and compliance requirements, including HIPAA, SOX, SOC 2, and GDPR. The engineer partners across teams to meet business needs, apply security best practices, and modernize identity operations through automation and AI. Success requires a strong foundation in information security and risk management, plus the leadership to resolve issues and drive improvements.

Requirements

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
At least 8 years of hands-on IAM engineering experience in mid-to-large enterprise environments.
Strong expertise in Okta, including lifecycle management, API access, workflows, and governance features.
Experience integrating IAM systems with HR platforms and managing user provisioning from a central source of truth.
Deep experience with PAM tools and controls, including just-in-time access, session recording, and credential vaulting.
Strong scripting and automation capabilities in PowerShell, Python, or JavaScript.
Familiarity with IAM standards and protocols: SAML, OAuth, SCIM, and OpenID Connect.
Understanding of audit and compliance requirements, including SOX, SOC 2, HIPAA, and GDPR.
Experience with Zero Trust identity architecture and adaptive authentication controls.
Excellent problem-solving, documentation, and communication skills.
Proficiency in Microsoft Office Suite, specifically Word, Excel, and Outlook, and general working knowledge of the Internet for business use.
Ability to sit, stand, and/or work at a computer for long periods.
Ability to work extended hours during implementations and on-call rotations; the job may require after-hours emergency response and periodically scheduled on-call response.
Successful completion of the pre-employment process, which includes a criminal background check, drug screening, credit check where applicable, and reference verification.

Nice To Haves

Experience in healthcare or life sciences, including protection of PHI and other sensitive data.
Hands-on experience implementing a PAM solution in production, including vendor evaluations or proofs of value.
Experience applying AI to IAM or security operations and securing AI agents and non-human identities.
Exposure to cloud IAM services such as AWS IAM, Azure AD/Entra ID, or GCP IAM.
Experience building automation between IAM and ITSM platforms, such as Okta and ServiceNow, using APIs and JSON.
Knowledge of the NIST Cybersecurity Framework and Zero Trust architecture.
ITIL or relevant certifications, such as Okta, CyberArk, or CISSP.
Ability to mentor team members and guide stakeholders in IAM best practices.
Self-motivation, curiosity, attention to detail, and ability to manage multiple priorities.

Responsibilities

Design, implement, and maintain IAM solutions aligned with security best practices and compliance standards.
Lead JML processes and HR system integration, including source-of-truth definition, attribute mapping, and user migrations.
Serve as a subject matter expert for Okta Identity Governance, Workflows, MFA, SSO, and API integrations.
Manage identity configuration as code using tools and processes such as Terraform, Git, and CI/CD pipelines, with versioning, review, consistent deployment, and audit traceability.
Administer and secure on-premises Active Directory and hybrid integration with Okta and Entra ID, including OUs, groups, Group Policy, service accounts, and privileged or tiered administrator access.
Drive evaluation, implementation, and adoption of PAM solutions, enforcing least privilege, just-in-time access, privileged account separation, and break-glass controls.
Lead cross-team IAM projects end to end, defining scope and milestones, coordinating dependencies, and communicating status and risks to leadership.
Implement and support Identity Governance processes, including role modeling, entitlement management (RBAC/ABAC), access reviews, and certifications.
Govern non-human identities, including service accounts, API keys, secrets, and AI agents, with clear ownership, least privilege, and lifecycle controls.
Develop automated workflows and scripts and apply AI-assisted tools where they reduce manual effort, such as access review analysis and audit evidence preparation.
Ensure secure, scalable application integrations using SAML, OAuth, SCIM, and OpenID Connect.
Align IAM architecture with Zero Trust principles, including adaptive and risk-based access, device trust, and passwordless authentication such as FIDO2 and WebAuthn.
Partner with Information Security on risk assessments, security policies and standards, remediation of identity-related findings, and investigations involving identities or privileged access.
Collaborate with security and compliance teams on internal and external audits, including evidence collection, documentation, and remediation.
Maintain technical documentation, SOPs, architecture references, and identity platform recovery procedures.
Troubleshoot complex IAM issues in collaboration with engineering, infrastructure, and support teams.
Perform other duties as assigned.