IAM Security Engineer

Truveta is the world’s first health provider led data platform with a vision of Saving Lives with Data. Our mission is to enable researchers to find cures faster, empower every clinician to be an expert, and help families make the most informed decisions about their care. Achieving Truveta’s ambitious vision requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values.

This position is based out of our headquarters in the Greater Seattle Area. #LI-onsite

Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference. We do things the right way.

Our commitment to security and compliance assurance cannot be stressed enough. This position is critical to ensuring we are successful.

If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you.

Success in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.

The successful candidate will design, implement and support solutions that support the company’s Digital Workplace strategy. They will work on leading edge technologies that help modernize endpoint management by leveraging the cloud to quickly deliver end-user improvements.

• Identity Lifecycle & Access Management
  • Manage and improve provisioning, de-provisioning, and modification processes for user accounts and service principals across cloud and enterprise systems.
  • Conduct access reviews, entitlement cleanups, and role evaluations to ensure least-privilege access.
  • Identify gaps in lifecycle processes and recommend enhancements or workflow automation opportunities.
• Access Requests & Role Governance
  • Process and validate access requests, ensuring alignment with RBAC models, security policies, and job function requirements.
  • Contribute to the development and refinement of RBAC roles, access policies, and approval workflows.
  • Partner with stakeholders to analyze access patterns and propose more efficient and secure role structures.
• Application Integration & IAM Enablement
  • Support onboarding applications into IAM systems, including SSO configuration, SCIM provisioning, OAuth app integration, and secure authentication setup.
  • Work with application and engineering teams to ensure proper identity integration and consistent enforcement of IAM standards.
  • Assist with evaluating and implementing new IAM tools or capabilities as the organization evolves.
• Security Controls & Identity Governance
  • Implement and support IAM security controls such as MFA, Conditional Access policies, PIM, and identity governance features.
  • Monitor for identity threats, misconfigurations, and anomalies; proactively recommend remediation steps.
  • Participate in maturing identity governance processes such as certification campaigns, privileged access workflows, and separation-of-duty reviews.
• Incident Response & Operational Support
  • Troubleshoot and resolve identity-related issues with moderate complexity, including authentication failures, directory sync issues, and access conflicts.
  • Investigate identity-related security alerts and coordinate escalation with Security Operations team as needed.
  • Provide SME support to IT, security, and engineering teams for IAM-related questions and problems.
• Compliance, Auditing & Reporting
  • Support internal and external audits by preparing access-related evidence, reports, and documentation.
  • Ensure IAM controls and workflows meet regulatory, security, and policy requirements.
  • Develop periodic reports on access activity, privileged accounts, anomalies, and IAM policy adherence.
• Documentation, Knowledge Sharing…