Staff Information Security Engineer - IntelliScript (Remote)

Milliman•Brookfield, WI

21h•$131,600 - $249,780•Remote

About The Position

Milliman IntelliScript is hiring a Staff Information Security Engineer to help continuously improve its security programs and protect its technology, processes, and data. The role combines strategic initiatives with day-to-day security operations and responses to external threats. The engineer will collaborate with Platform Engineering and Software Development teams to plan and implement security initiatives, maintain and improve security infrastructure, and create processes that support a secure product and environment. The position is open to remote work and may require travel to the annual All Team Meeting and occasional other meetings.

Requirements

10 or more years of relevant experience.
5 or more years of experience with Identity Access Management.
5 or more years of hands-on technical engineering experience.
Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity.
Strong understanding of IAM protocols such as OAuth, SAML, OIDC, and LDAP.
Experience configuring IAM solutions for API, web, and web-authentication use cases.
Experience building, supporting, and securing cloud-based web infrastructure with AWS.
Strong understanding of cryptography, authentication, authorization, secrets management, data security, web technology stacks, and cloud security.
Experience in DevSecOps and relevant technologies such as Git, Docker, Windows, SIEM, AWS Security products, and Terraform.
Knowledge of security best practices for building web applications.
Experience with secure coding practices and security frameworks such as OWASP, NIST, and CIS.
Understanding of security threats and the ability to address and prevent them.
Working knowledge of software engineering and deployments, including CI/CD pipelines and SCM.
Ability to conduct security assessments of applications.
Demonstrated urgency, sound judgment, accountability, and ability to drive work and projects to completion.
Ability to communicate complex information clearly, document work comprehensively, collaborate effectively, and address team issues openly.
Commitment to staying current with industry trends and continuing professional development.

Nice To Haves

Continued education and/or advanced degree(s).
Industry certifications.
Experience in environments subject to HITRUST, HIPAA, and/or PCI regulations.
Experience in software-as-a-service, actuarial science, and/or the insurance industry.

Responsibilities

Manage and improve Identity Access Management programs.
Improve, monitor, and maintain the Information Security Program.
Execute security initiatives related to infrastructure, products, and data.
Contribute to strategic planning of security work and recommend improvements.
Work with application developers to improve product-feature security.
Design and implement security controls and measures to protect applications and data.
Monitor and analyze security events and incidents, and respond promptly to breaches and incoming threats.
Integrate security best practices throughout the software development lifecycle in collaboration with development teams.
Identify and prioritize security vulnerabilities and develop mitigation strategies.
Prepare and train developers and raise security awareness across the organization.
Assess, address, and report on threat levels and security preparedness.
Assist in maintaining compliance with relevant industry standards.
Lead problem-solving and risk-management initiatives, and develop risk mitigation and contingency plans.
Communicate complex information and produce documentation; collaborate across teams, drive work forward, and mentor peers.

Benefits

Medical, dental, and vision coverage for employees, dependents, and domestic partners.
Employee Assistance Program (EAP).
401(k) plan with company matching and profit-sharing contributions.
Discretionary bonus program.
Flexible Spending Accounts for dependent care, transportation, and eligible medical expenses.
Paid time off accruing from the first day of work; full-time employees accrue 15 days per year.
At least 10 paid holidays per year.
Adoption and fertility assistance.
Up to 11 weeks of paid parental leave for eligible employees.
Life insurance and AD&D, with premiums fully covered by Milliman.
Short-term and long-term disability coverage, fully paid by Milliman.
Skills training, career development, learning, and mentoring opportunities.