Staff Information Security Engineer - IntelliScript (Remote)

Milliman•Brookfield, WI

1d•$131,600 - $249,780•Remote

About The Position

As a Staff Information Security Engineer on Milliman IntelliScript’s Information Security team, you will help continuously improve security programs to protect the organization’s technology, processes, and data. The role combines strategic initiatives with day-to-day security operations and ongoing responses to external threats, with impact across IntelliScript as the business modernizes and scales. You will collaborate with Platform Engineering and Software Development teams to plan and implement security initiatives, maintain and improve security infrastructure, and create processes that support a secure product and environment. The position is open to remote work. The successful applicant must be willing to travel to the annual All Team Meeting and may occasionally travel for other meetings.

Requirements

10 or more years of relevant experience.
5 or more years of experience with Identity Access Management.
5 or more years of hands-on technical engineering experience.
Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity.
Strong understanding of IAM protocols such as OAuth, SAML, OIDC, and LDAP.
Experience configuring IAM solutions for API, web, and web authentication use cases.
Experience building, supporting, and securing cloud-based web infrastructure with AWS.
Strong understanding of cryptography, authentication, authorization, secrets management, data security, web technology stacks, and cloud security.
Experience in DevSecOps and relevant technology, such as Git, Docker, Windows, SIEM, AWS Security products, and Terraform.
Knowledge of security best practices for building web applications.
Experience with secure coding practices and security frameworks such as OWASP, NIST, and CIS.
Understanding of security threats and the ability to address and prevent them.
Working knowledge of software engineering and deployments, including CI/CD pipelines and SCM.
Ability to conduct security assessments of applications.
Demonstrated urgency, initiative, accountability, and willingness to take responsibility for outcomes.
Keeps technical expertise current with industry trends, best practices, and emerging technologies.
Ability to lead problem-solving initiatives, integrate cross-functional perspectives, and achieve sustainable outcomes.
Ability to communicate complex information clearly and produce comprehensive documentation with minimal supervision.
Ability to drive projects and tasks forward, make informed decisions, and collaborate to meet deadlines and shared objectives.
Willingness to pursue learning opportunities, mentor peers, continuously update skills, and remain committed to professional development.
Ability to lead organizational risk management initiatives and design risk mitigation and contingency plans.
Ability to proactively address team issues and facilitate open communication.
Willingness to take on additional team responsibilities and roles.
Willingness to travel to the annual All Team Meeting and occasionally to other meetings.

Nice To Haves

Continued education and/or advanced degree(s).
Industry certifications.
Experience in environments subject to HITRUST, HIPAA, and/or PCI regulations.
Experience in software-as-a-service, actuarial science, and/or the insurance industry.

Responsibilities

Manage and improve Identity Access Management programs.
Improve, monitor, and maintain the Information Security Program.
Execute security initiatives related to infrastructure, products, and data.
Contribute to strategic security planning and recommend improvements.
Work with application developers to improve the security of product features.
Design and implement security controls and measures to protect applications and data.
Monitor and analyze security events and incidents, and respond promptly to security breaches.
Collaborate with development teams to integrate security best practices throughout the software development lifecycle.
Identify and prioritize security vulnerabilities and develop mitigation strategies.
Prepare and train developers and raise security awareness across the organization.
Respond proactively to incoming security threats.
Continually assess, address, and report on threat levels and preparedness.
Assist in maintaining compliance with industry standards relevant to the organization.

Benefits

Medical, dental, and vision coverage for employees, dependents, and domestic partners.
Employee Assistance Program (EAP) for confidential support with personal and work-related challenges.
401(k) plan with company matching and profit-sharing contributions.
Discretionary bonus program.
Flexible Spending Accounts for dependent care, transportation, and eligible medical expenses.
Paid time off that begins accruing on the first day of work; full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis.
A minimum of 10 paid holidays per year.
Family building benefits, including adoption and fertility assistance.
Up to 11 weeks of paid parental leave for employees who meet eligibility criteria.
Life insurance and AD&D, with premiums fully covered by Milliman.
Short-term and long-term disability coverage, fully paid by Milliman.