{"id":3648006,"url":"https://alion.io/job/caris-life-sciences-senior-iam-information-security-engineer","title":"Senior IAM & Information Security Engineer","company":{"id":1953796,"name":"Caris Life Sciences","domain":"carislifesciences.com","url":"https://alion.io/company/carislifesciences","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irving, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"GDPR","optional":false},{"name":"Git","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Office","optional":false},{"name":"Okta","optional":false},{"name":"Outlook","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"ITIL","optional":true},{"name":"ITSM","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-11-02T23:23:09Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-06T02:46:54Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"At Caris, we understand that cancer is an ugly word-a word no one wants to hear, but one that connects us all. That’s why we’re not just transforming cancer care-we’re changing lives.\nWe introduced precision medicine to the world and built an industry around the idea that every patient deserves answers as unique as their DNA. Backed by cutting-edge molecular science and AI, we ask ourselves every day:“What would I do if this patient were my mom?”That question drives everything we do.\nBut our mission doesn’t stop with cancer. We're pushing the frontiers of medicine and leading a revolution in healthcare-driven by innovation, compassion, and purpose.\nJoin us in our mission to improve the human condition across multiple diseases. If you're passionate about meaningful work and want to be part of something bigger than yourself, Caris is where your impact begins.\nPosition Summary\nWe are seeking a Senior IAM & Information Security Engineer with deep, hands-on experience to lead the design, implementation, and management of enterprise-level Identity and Access Management (IAM) solutions. This role spans the full IAM lifecycle, from Joiner-Mover-Leaver (JML) processes and HR system integration to Privileged Access Management (PAM), Identity Governance (IG), and Zero Trust. PAM is a key near-term priority, and the ideal candidate will drive it across development, infrastructure, and networking teams, building consensus to adopt new controls.\nOperating in a regulated healthcare and life sciences environment, the role protects sensitive patient data (PHI) and ensures IAM solutions are secure, reliable, and compliant with standards such as HIPAA, SOX, SOC 2, and GDPR. The engineer will collaborate with cross-functional teams to address business requirements while adhering to security best practices and using automation and AI to modernize identity operations. A strong understanding of information security principles, risk management frameworks, and leadership in addressing issues and driving improvements is essential for this role.\nJob Responsibilities\nDesign, implement, and maintain IAM solutions aligned with security best practices and compliance standards (SOX, SOC 2, HIPAA, GDPR).\nLead JML processes and HR system integration (e.g., Workday), including source of truth, attribute mapping, and user migrations.\nServe as subject matter expert for Okta, including Identity Governance, Workflows, MFA, SSO, and API integrations.\nManage identity configuration as code (e.g., Terraform, Git, CI/CD pipelines) to version, review, and deploy Okta and IAM changes consistently and with full audit traceability.\nAdminister and secure on-premises Active Directory and its hybrid integration with Okta and Entra ID, including OUs, groups, Group Policy, service accounts, and privileged/tiered admin access.\nDrive the evaluation, implementation, and adoption of PAM solutions (e.g., CyberArk, BeyondTrust, Delinea, StrongDM), enforcing least privilege, just-in-time access, privileged account separation, and break-glass controls.\nLead cross-team IAM projects end to end, defining scope and milestones, coordinating dependencies, and keeping leadership informed of status and risks.\nImplement and support Identity Governance processes, including role modeling, entitlement management (RBAC/ABAC), access reviews, and certifications.\nGovern non-human identities (service accounts, API keys, secrets, and AI agents) with clear ownership, least privilege, and lifecycle controls.\nDevelop automated workflows and scripts (PowerShell, Python, JavaScript) and apply AI-assisted tools where they reduce manual effort, such as access review analysis and audit evidence preparation.\nEnsure secure, scalable application integrations using SAML, OAuth, SCIM, and OpenID Connect.\nAlign IAM architecture with Zero Trust principles, including adaptive and risk-based access, device trust, and passwordless authentication (FIDO2, WebAuthn).\nPartner with the Information Security team on risk assessments, security policies and standards, and remediation of identity-related findings, and support investigations involving identities or privileged access.\nCollaborate with security and compliance teams to support internal and external audits, including evidence collection, documentation, and remediation.\nMaintain clear technical documentation, SOPs, and architecture references, including identity platform recovery procedures.\nTroubleshoot complex IAM issues, working cross-functionally with engineering, infrastructure, and support teams.\nRequired Qualifications\nBachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.\n8+ years of hands-on IAM engineering experience in mid-to-large enterprise environments.\nStrong expertise in Okta, including lifecycle management, API access, workflows, and governance features.\nProven experience integrating IAM systems with HR platforms and managing user provisioning from a central source of truth.\nDeep experience with PAM tools and controls, including JIT access, session recording, and credential vaulting.\nStrong scripting/automation capabilities (PowerShell, Python, or JavaScript).\nFamiliarity with IAM standards and protocols: SAML, OAuth, SCIM, OpenID Connect.\nSolid understanding of audit and compliance requirements (SOX, SOC 2, HIPAA, GDPR).\nExperience with Zero Trust identity architecture and adaptive authentication controls.\nExcellent problem-solving, documentation, and communication skills.\nProficient in Microsoft Office Suite, specifically Word, Excel, Outlook, and general working knowledge of Internet for business use.\nPreferred Qualifications\nExperience in healthcare or life sciences, including protection of PHI and other sensitive data.\nHands-on experience implementing a PAM solution in production, including vendor evaluations or POVs.\nExperience applying AI to IAM or security operations and securing AI agents and non-human identities.\nExposure to cloud IAM services (e.g., AWS IAM, Azure AD/Entra ID, GCP IAM).\nExperience building automation between IAM and ITSM platforms (e.g., Okta and ServiceNow) using APIs and JSON.\nKnowledge of the NIST Cybersecurity Framework and Zero Trust architecture.\nITIL or relevant certifications (e.g., Okta, CyberArk, CISSP).\nAbility to mentor team members and guide stakeholders in IAM best practices.\nSelf-motivated and curious, with strong attention to detail and the ability to manage multiple priorities.\nPhysical Demands\nMust possess the ability to sit, stand, and/or work at a computer for long periods of time.\nAbility to work extended hours during implementations and on-call rotations.\nTraining\nAll job specific, safety, and compliance training are assigned based on the job functions associated with this employee.\nOther\nJob may require after-hours response to emergency issues.\nPeriodically scheduled on-call may require after-hours response for technical emergencies not explicitly related to assigned job responsibilities.\nOther duties as assigned.\nConditions of Employment: Individual must successfully complete pre-employment process, which includes criminal background check, drug screening, credit check( applicable for certain positions) and reference verification.\nThis job description reflects management’s assignment of essential functions. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.\nCaris Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, among other things, or status as a qualified individual with disability.","description_format":"text","description_chars":7778,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Biotechnology","Genomics & Genetic Testing","Precision Medicine"],"lifecycle":[{"event":"open","at":"2026-11-02T23:23:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":36,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/caris-life-sciences-senior-iam-information-security-engineer","json_url":"https://alion.io/job/caris-life-sciences-senior-iam-information-security-engineer.json","meta":{"generated_at":"2026-11-06T03:34:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5943,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1953796},"rest":"https://alion.io/mcp/rest/get_company?id=1953796"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaris-life-sciences-senior-iam-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaris-life-sciences-senior-iam-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaris-life-sciences-senior-iam-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caris-life-sciences-senior-iam-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaris-life-sciences-senior-iam-information-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3648006}},{"tool":"search_jobs","arguments":{"company":"carislifesciences.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3648006},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}