Sr Cybersecurity Engineer

Fairview Health Services•Minneapolis, MN

16h

About The Position

Senior Cybersecurity Engineer, CIAM is responsible for designing, developing, scripting, configuring, testing and maintaining complex Cybersecurity and Risk management tools and technologies for M Health Fairview. This highly experienced Senior Cybersecurity IAM Engineer to lead the design, implementation, and security architecture of our patient portal digital identity platform. This role focuses on building and securing patient-facing authentication, identity proofing, consent management, and protected access to electronic health information. The ideal candidate brings deep expertise in Okta Customer Identity Access Management (CIAM) and a strong background in healthcare security. This candidate will partner with Digital Product, Application Development, Compliance, and Clinical Informatics teams to deliver a secure, scalable, and frictionless patient identity experience.

Requirements

Bachelor’s degree in computer science, Computer Engineering, Technology Information Systems, Engineering or related technical discipline or combination of relevant experience/education.
10+ years of cumulative experience in Information Technology with progressive responsibility.
5+ years of hands-on experience with Okta (preferably CIAM implementations).
Experience designing customer-facing or patient-facing identity platforms such as MyChart.
Deep knowledge of OAuth 2.0, OIDC, SAML, adaptive MFA, and API security.
Experience securing REST APIs and microservices architectures.
Experience in healthcare or other regulated environments.
Experience supporting HIPAA compliance and audits.
Ability to thrive in a sense-of-urgency environment and leverage best practices.
Proficiency in Agile project management methodology.
Hands-on experience with Microsoft Azure, Azure AD (AAD), AAD Connect, ADFS, SailPoint ISC, and Office 365.
Ability to author and edit scripts, such as PowerShell, VBS, or similar.
Experience with any Identity Management and Access Governance tools such as SailPoint, including custom development.
Expert ability to use Visio and infographic based visual aids in articulating solution design, integration, onboarding of applications.
Excellent documentation and communication skills.
Experience collaborating with Digital Product, Engineering, Privacy, and Clinical teams.
Ability to operate in high-availability healthcare environments.
Ability to effectively communicate both verbally and written with all levels within the organization.
Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups.
Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills.
Ability to work well within a team environment, as well as independently.

Nice To Haves

Experience with SailPoint and/or other IDM platforms
Deep understanding of digital patient experience
Ability to balance usability and strong security controls
SCIM 2.0
Bachelor’s degree or higher in Computer Science, Computer Engineering, Technology Information Systems Engineering or related technical discipline.
Experience with patient portals, digital front door initiatives, and cloud platforms (Azure/AWS).
Experience designing identity solutions for high-scale environments (100k+ users).
Okta Certified Administrator or Consultant.
CISSP, CISM, or HCISPP certification.

Responsibilities

Design and implement secure patient identity solutions using Okta CIAM.
Architect authentication for patient portals, mobile health apps, telehealth platforms, and billing systems.
Implement password-less authentication and adaptive MFA.
Design secure self-service registration workflows.
Implement identity proofing and fraud prevention controls.
Build secure account recovery processes.
Architect access controls aligned with HIPAA Security Rule.
Implement role-based and claims-based authorization models.
Design step-up authentication for sensitive transactions.
Secure APIs using OAuth 2.0 and OIDC.
Integrate CIAM platform with EHR, MyChart, CRM, billing, and telehealth systems.
Ensure HIPAA, HITRUST, and regulatory compliance.
Monitor identity-based threats and integrate logs with SIEM platforms.
Lead complex projects related to information security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies.
Assure the implementation of appropriate security configurations or re-configurations and work with appropriate teams to execute them as required.
Foster a culture of improvement, efficiency gains and innovative thinking.
Coach and mentor team members as needed.
Adapt and embrace change and demonstrate flexibility in taking up and fulfilling other duties as assigned.
Demonstrates ability to provide service adjusting approaches to reflect developmental level and cultural differences of population served.
Partners with patient care giver in care/decision making.
Communicates in a respective manner.
Ensures a safe, secure environment.
Fulfill all organizational requirements.
Completes all required learning relevant to the role.
Complies with and maintains knowledge of all relevant laws, regulations, policies, procedures and standards.
Fosters a culture of improvement, efficiency and innovative thinking.
Performs other duties as assigned.