Senior IAM Security Engineer

As a Senior IAM Security Engineer at Pomelo Care, your main responsibilities include developing and implementing an IAM strategy that aligns with our goals, designing and deploying IAM infrastructure, collaborating with cross-functional teams to address IAM needs, and ensuring compliance with regulations. You'll also lead initiatives for automation and manage Identity Governance, ensuring the security and efficiency of our IAM systems.

To qualify for the Senior IAM Security Engineer role at Pomelo Care, candidates should have a bachelor's degree in Information Technology or a related field, with an advanced degree preferred. Additionally, a minimum of 7 years of experience in information security, IT, or related areas is required, along with strong expertise in IAM technologies and proven experience with APIs and scripting.

The Senior IAM Security Engineer plays a vital role in supporting Pomelo Care's mission by ensuring that our technology-driven care platform remains secure. By implementing effective IAM solutions, this role helps protect sensitive patient information and enables clinicians to provide personalized care without compromising security, ultimately contributing to better outcomes for moms and babies.

As a Senior IAM Security Engineer at Pomelo Care, familiarity with technologies such as Okta, SSO integrations, IAM protocols (SAML, OIDC, OAuth), and Identity Governance frameworks is essential. Experience in scripting languages and coding for automation will also be crucial in developing custom solutions and enhancing our IAM infrastructure.

Pomelo Care offers competitive healthcare benefits, generous equity compensation, unlimited vacation, and access to the First Round Network for mentorship and community support. Joining our team also means becoming part of a mission-driven startup that prioritizes employee growth and values diverse perspectives.

In answering this question, provide specific examples of IAM solutions you've implemented and how they improved security or efficiency in previous roles, linking your experience to Pomelo Care's focus on secure patient care.

Share a structured approach you would take to analyze existing policies, assess risk areas, engage with stakeholders, and ensure compliance with regulations, while aligning with Pomelo Care's mission.

Emphasize your commitment to professional development, mentioning specific resources like industry conferences, online courses, and relevant certifications that enhance your expertise in IAM.

Discuss the importance of a quick response plan, emphasizing communication with stakeholders, assessing the breach's impact, and implementing corrective measures to strengthen IAM controls while ensuring similar incidents are prevented in the future.

Explain how automation can increase efficiency and reduce human error in IAM processes, mentioning specific tools or techniques you've used to streamline role management and provisioning.

Describe the importance of clear and accessible communication. Mention the use of workshops, training sessions, and easy-to-understand documentation to ensure employees fully comprehend IAM policies and their responsibilities.

Discuss your familiarity with compliance frameworks relevant to healthcare, such as HIPAA, and provide examples of how you've ensured compliance in previous roles while implementing IAM solutions.

Identify potential challenges such as evolving threats or ensuring user adoption of IAM systems. Then outline strategies to mitigate these challenges, showcasing your proactive approach to security.

Share your understanding of the Zero Trust model and how implementing it can benefit Pomelo Care's security posture. Provide examples of how you’ve applied those principles to safeguard systems in past positions.

Discuss methodologies you use to assess IAM effectiveness, such as performance metrics, user feedback, and compliance audits, emphasizing a commitment to continuous improvement in IAM strategies.