Senior Security Engineer

Who We Are and Why Join Us

At OnMedourpurpose is simple but powerful...to improve the quality of life and sense of well-being in our communities by bringing access to healthcare to everyone, everywhere. Our path to everywhere has already begun, with our innovative Care Station, a small but mighty, Clinic-in-a-Box, bringing #healthcare access anywhere with an outlet to plug it in. Poised to become a keycomponentin America’s public health infrastructure, the OnMed Care Station is the only tech-enabled, human-led, hybrid care solution that combines the comprehensive experience,trustand outcomes of aclinic, withthe rapid scalability of virtual care.
At OnMed, every role,everyday, is directlyimpactingthe communities we serve.

You’lljoin a high-performing purpose-driven team, innovating to break down the barriers that keep people from the care they need.
This is not just a job...it'sa movement to bring access to healthcare where and when people need it most.

It’shealthcare that shows up.

You are a hands-on, deeply technical Security Engineer who designs, builds, deploys, and operates security across cloud, application, network, and physical infrastructure— not from the sidelines, but with your hands on the tools. You are fluent in the Microsoft Azure and Entra ecosystem, you understand networking and firewall rules cold, and you are just as comfortable reviewing application code as you are tuning detections in an XDR/SIEM console and running an incident to ground.

You stay current with emerging threats and technologies, you automate what should be automated, and you have enough compliance grounding to translate technical controls into evidence auditors trust. You thrive in a new, fast-paced, high-demand environment and take direct ownership of the security and resilience of the systems that protect our patients’ healthcare data.

• Designing, building, deploying, and managing security controls hands-on across OnMed’s cloud, application, and network environments— owning the outcomes directly rather than overseeing them from a distance.
• Architecting and hardening the Microsoft Azure and M365/Entra environment—identity, network security groups, firewall rules, and encryption at-rest and in-transit— along with corporate and Care Station field-device endpoints.
• Operating and tuning the security stack day to day: XDR/MDR, SIEM, and SOC workflows—building and refining detections, triaging alerts, and working them hands-on.
• Leading incident response end to end: triage, containment, eradication, root cause analysis, and documentation.
• Designing, reviewing, and maintaining network and firewall architecture—segmentation, rule sets, VPN, and Zero Trust access for the remote workforce and field devices.
• Reviewing application code, integrations, and system designs (in-house and vendor-built) for security gaps, and partnering with engineering on remediation.
• Automating security operations and repetitive tasks through scripting where it strengthens detection, response, or hardening.
• Administering identity and access in Entra — quarterly access reviews, privileged account audits, and MFA/SSO enforcement.
• Maintaining control evidence for SOC 2, HITRUST, FedRAMP, HIPAA, and related frameworks, supporting auditor and assessor requests, and tracking findings through to remediation.
• Where a managed security services provider is used, directing and holding them accountable as an extension of the in-house team—while retaining direct ownership of security outcomes.
• Maintaining security policies, supporting security awareness training, and responding to customer and vendor security questionnaires.

Must Have:

• Deep, hands-on experience designing, developing, deploying, and managing security across multiple technology stacks—engineering the controls yourself, not only directing others.
• Strong hands-on expertise with Microsoft Azure cloud security and the M365/Entra —identity, network security, and workload protection.
• Excellent understanding of networking and firewall rules—segmentation, NGFW and Azure Firewall rule design and administration, VPN, IDS/IPS, and Zero Trust Network Access…