Experienced Information Security Engineer

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You'll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You'll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.

We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Summary

Seeking a Senior Identity & Access Management Engineer to implement, automate, and operate federated identity integrations in support of modern healthcare applications. This role focuses on hands-on delivery of authentication and authorization solutions using industry-standard protocols, while applying CI/CD and automation practices to ensure identity changes are repeatable, reliable, and low risk.

The ideal candidate is an engineer who can work deeply in identity configurations, application integrations, and deployment pipelines, translating approved designs into production-ready solutions that scale across workforce and customer-facing use cases.

Your role in our mission

• Implement and support federated authentication and authorization integrations using OpenID Connect, OAuth 2.1, and SAML 2.0.
• Configure and maintain identity integrations for web, mobile, and API-based applications, including:
• Client registrations and trust relationships
• Token claims, scopes, and attribute mappings
• Certificates, signing keys, and rotation processes
• Support application modernization efforts by:
• Migrating legacy authentication mechanisms to standards-based federation
• Enabling token-based access for APIs and distributed services
• Supporting decoupled identity patterns for modern application architecture
• Build and maintain CI/CD pipelines for identity configurations and integrations, including:
• Source control of identity artifacts
• Automated deployment and promotion between environments
• Validation and rollback of identity changes
• Apply infrastructure-as-code or configuration-as-code principles to identity platforms where possible.
• Collaborate with application teams to implement identity integrations according to established patterns and standards.
• Troubleshoot complex authentication and authorization issues using logs, HTTP traces, and token inspection.
• Support operational identity activities such as incident response, certificate renewal, and configuration maintenance.
• Strong contribution to technical documentation, runbooks, and implementation guides.

What we're looking for

• 7+ years of experience in IAM, application security, or identity-focused engineering roles.
• Strong hands-on experience with:
• OpenID Connect and OAuth 2.1 flows and grant types
• SAML 2.0 federation configurations
• JWT signing, encryption, and validation
• Practical experience integrating identity with modern web and API architectures.
• Experience implementing CI/CD pipelines and Git-based workflows.
• Strong automation skills using scripting or pipeline tooling.
• Proven ability to deliver identity changes safely in regulated or security-sensitive environments.
• Strong troubleshooting skills at the protocol and application integration level.

What you should expect in this role

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation
• The deadline to submit applications for this posting is 5/30/2026

The pay range for this position is $110,000 - $150,000 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work 'll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits , and educational assistance.

We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You'll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other…