Senior Security Engineer I, IAM

Oscar Health•New York, NY

5d•$163,944 - $215,176•Hybrid

About The Position

We're hiring a Senior Identity and Access Manager to join our Security Team. Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. As an Identity and Access Management Engineer, you will build Oscar's identity and access management disciplines across internally built applications, standard identity platforms such as Okta and Google Workspace Identity, AWS-hosted systems, and the BigQuery data lake. You will design least privilege access models, create enterprise identity architectures, and build identity threat detection and response capabilities that protect workforce, internal application, and customer identity surfaces.

Requirements

4+ years of relevant experience in Identity engineering.
Experience designing or implementing identity and access management controls for enterprise systems, cloud environments, SaaS platforms, or internally built applications.
Strong understanding of least privilege, role-based and attribute-based access control, privileged access patterns, identity lifecycle management, and access review processes.
Hands-on experience with identity platforms such as Okta, Google Workspace Identity, and Google Cloud permission models.
Working knowledge of authentication and authorization protocols such as SAML, OAuth, OIDC, SCIM, LDAP, and related session, token, and federation patterns.
Strong written and verbal communication skills, including the ability to explain identity risk and architecture tradeoffs to technical and non-technical audiences.

Nice To Haves

Experience building identity controls in AWS environments and data platforms such as BigQuery.
Experience building or operating ITDR, UEBA, SIEM, SOAR, or other security detection and response capabilities.
Experience in healthcare, insurance, fintech, or another regulated technology environment.
Experience writing automation, queries, or production-quality code to support identity workflows, detections, or platform integrations.

Responsibilities

Build Oscar's identity and access management disciplines across internally built applications, standard identity platforms such as Okta and Google Workspace Identity, AWS-hosted systems, and the BigQuery data lake.
Design least privilege access models.
Create enterprise identity architectures.
Build identity threat detection and response capabilities that protect workforce, internal application, and customer identity surfaces.
Partner with software engineering teams to review permission models, design secure authorization patterns, and improve access controls in custom applications.
Reason about identity telemetry, detection logic, high-risk configuration states, and incident response workflows.