Staff Software Engineer, Security
About The Position
Tempus is seeking a Staff Software Engineer for Security Engineering to drive key architectural initiatives for the company's Security stack. This role involves setting the technical vision for security engineering, leading build-versus-buy decisions, evolving Identity and Access Management (IAM), and promoting cross-functional engineering best practices to support platform innovation. The engineer will enable core identity and authentication systems like Single Sign-On (SSO) and modern identity standards (OAuth, SAML, SCIM) to secure access across a decentralized microservices architecture. Additionally, the role will involve architecting and securing emerging agentic controls and distributed event-based systems to ensure patient records and intellectual property are safely utilized by generative AI technologies.
Requirements
- Experience setting the technical vision and direction for a product area, advocating for proven design principles and technology choices.
- Experience implementing identity standards and innovating on them.
- Several years of experience working on software development teams.
- Confident leading technical analysis & design, evaluating tradeoffs, leading build and buy decisions from a technical perspective, and establishing best practices.
- Experience developing and securing distributed, event-based systems at an interesting scale of transaction and/or data volume.
- Experience working in fast-paced, agile environments and helping keep projects on track, troubleshoot roadblocks, write documentation, and coordinate cross-team collaboration.
- Collaborate well with diverse, talented teams while mentoring and learning from team members regardless of experience level.
- Experience working with cloud infrastructure providers (Amazon Web Services, Google Cloud, etc), and related tools like Docker, Terraform, or Kubernetes.
- Familiarity with an identity management platform like Auth0, Okta, Microsoft Entra, or Ping Identity.
- Polyglot coder - experience with and comfortable using a variety of programming languages and frameworks, and picking up new ones.
Nice To Haves
- Deep knowledge of identity standards like OAuth, SCIM, and SAML.
- Experience with TypeScript, JavaScript, Node.JS, or Python.
- Experience with OAuth 2.1 emerging agentic controls.
- Experience with Chronicle or other SIEMs.
- Experience with various Authorization models, RBAC, ReBAC, ABAC, and PBAC and their implementation tradeoffs.
Responsibilities
- Lead technical decisions for the security engineering team and implement best in class customer identity management, authorization, and observability systems across the business.
- Manage and improve the existing security micro-services, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.
- Work with a variety of teams cross-functionally to implement internal standards for security across a micro-service driven architecture.
- Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.
- Discover deficiencies in engineering tooling, designs, and processes and make the case for and driving improvements.
- Help level-up engineering practice across Tempus through documentation, mentorship, training, and engagement with engineers.
- Present new technologies and ideas to the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.
- Lead build/buy decisions in the security domain to improve the velocity of engineering, drive down costs, and ensure secure technical excellence.
Benefits
- incentive compensation
- restricted stock units
- medical and other benefits depending on the position
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
