Associate Director, Cybersecurity Engineering

Become a part of our caring community and help us put health first

The Associate Director, Cyber Security Engineering will lead the Workforce and Cloud Identity & Access Management (IAM) functions, overseeing authentication and authorization across Azure, AWS, and GCP environments. This role is responsible for advancing IAM strategies, implementing self‑service capabilities, strengthening security controls, and optimizing the user experience. The leader will drive modernization efforts and ensure alignment with the organization’s SAFE work management methodology.

This position requires hands‑on technical leadership, operational excellence, and collaborative partnership with stakeholders. The team is also responsible for on‑call support and the continuous improvement of IAM services.

• Lead and mentor the Workforce and Cloud IAM engineering team, fostering a culture of technical excellence, service and accountability.
• Architect and deliver IAM solutions across multiple cloud platforms (Azure, AWS, GCP) and workforce systems, ensuring scalability and security.
• Advance workforce authentication and authorization capabilities, including the implementation of user self‑service features and enhanced identity controls to mitigate risk.
• Support and champion Identity Security for AI business needs ensuring development includes identity security by design at initiation.
• Champion the adoption and integration of advanced identity security solutions to enhance the organization’s identity security posture.
• Balance security requirements with user experience, driving continuous improvement in controls, processes, and service delivery.
• Own the product management lifecycle for IAM services, including roadmap development, stakeholder communication, and service enhancements.
• Manage and support on‑call activities, and be part of on‑call rotation for leadership escalations as needed.
• Collaborate with business and technology stakeholders to understand requirements and deliver high‑impact IAM solutions.
• Stay current on industry trends, emerging technologies, and regulatory requirements related to IAM and cloud security.

• 7+ years’ experience in technical leadership roles, driving complex programs and initiatives with cross‑functional stakeholders
• Proven experience in leading IAM engineering teams and delivering solutions across Azure, AWS, and GCP environments.
• Deep technical expertise in identity management, authentication/authorization protocols, and PBAC concepts.
• Demonstrated success in building and operating scalable, secure IAM systems with a strong focus on user experience.
• Experience implementing self‑service IAM capabilities and modernizing identity security controls.
  
  Strong understanding of SAFE or similar agile work management methodologies.
• Excellent leadership, communication, and stakeholder engagement skills.
• Hands‑on approach to problem‑solving and team collaboration.
• Ability to participate in and oversee on‑call support for IAM services.

• Bachelor's and/or Master’s degree in information technology, Cybersecurity, Technology Management or other applicable disciplines
• Demonstrated experience in architecting and delivering modernized authentication and authorization solutions across cloud and on‑prem environments to support workforce Identity
• Industry certifications such as CISSP, CISM, advanced level certifications from Azure, AWS, GCP
• Experience using work management tools such as ADO and Jira to manage team workload and prioritization
• Project Management certifications from leading organizations such as SAFe and PMI

• WAH requirements:
  Must have the ability to provide a high speed DSL or cable modem for a home office. Associates or contractors who live and work from home in the state of California will be provided payment for their internet expense.
• A minimum standard speed for optimal performance of 25x10 (25mpbs download x 10mpbs upload) is required.
• Satellite and Wireless Internet service is NOT allowed for this role.
• A dedicated space lacking ongoing interruptions to protect member…