Cybersecurity Engineer

Senior Cybersecurity Engineer, CIAM is responsible for designing, developing, scripting, configuring, testing and maintaining complex Cybersecurity and Risk management tools and technologies for M Health Fairview. This highly experienced Senior Cybersecurity IAM Engineer to lead the design, implementation, and security architecture of our patient portal digital identity platform. This role focuses on building and securing patient-facing authentication, identity proofing, consent management, and protected access to electronic health information.

The ideal candidate brings deep expertise in Okta Customer Identity Access Management (CIAM) and a strong background in healthcare security. This candidate will partner with Digital Product, Application Development, Compliance, and Clinical Informatics teams to deliver a secure, scalable, and frictionless patient identity experience.

Job Expectations: Senior Cybersecurity Engineer, CIAM will have following primary job responsibilities.

• Patient Digital Identity Architecture:

• Design and implement secure patient identity solutions using Okta CIAM.

• Architect authentication for patient portals, mobile health apps, telehealth platforms, and billing systems.

• Experience with SailPoint and/or other IDM platforms

• Implement password-less authentication and adaptive MFA.

• Deep understanding of digital patient experience

• Ability to balance usability and strong security controls

• Patient Registration & Identity Proofing:

• Design secure self-service registration workflows.

• Implement identity proofing and fraud prevention controls.

• Build secure account recovery processes.

• Secure Access to ePHI:

• Architect access controls aligned with HIPAA Security Rule.

• Implement role-based and claims-based authorization models.

• Design step-up authentication for sensitive transactions.

• API & Application Integration:

• Secure APIs using OAuth 2.0 and OIDC.

• Integrate CIAM platform with EHR, MyChart, CRM, billing, and telehealth systems.

• SCIM 2.0

• Compliance & Monitoring:

• Ensure HIPAA, HITRUST, and regulatory compliance.

• Monitor identity-based threats and integrate logs with SIEM platforms.

• Lead complex projects related to information security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies. Assure the implementation of appropriate security configurations or re-configurations and work with appropriate teams to execute them as required.

• Foster a culture of improvement, efficiency gains and innovative thinking. Coach and mentor team members as needed. Adapt and embrace change and demonstrate flexibility in taking up and fulfilling other duties as assigned.

Organization Expectations:

• Demonstrates ability to provide service adjusting approaches to reflect developmental level and cultural differences of population served

• Partners with patient care giver in care/decision making.
• Communicates in a respective manner.
• Ensures a safe, secure environment.

Fulfill all organizational requirements

• Completes all required learning relevant to the role

• Complies with and maintains knowledge of all relevant laws, regulations, policies, procedures and standards.

• Fosters a culture of improvement, efficiency and innovative thinking.
• Performs other duties as assigned

• Bachelor’s degree in computer science, Computer Engineering, Technology Information Systems, Engineering or related technical discipline or combination of relevant experience/education.
• 10+ years of cumulative experience in Information Technology with progressive responsibility.
• 5+ years of hands-on experience with Okta (preferably CIAM implementations).
• Experience designing customer-facing or patient-facing identity platforms such as MyChart
• Deep knowledge of OAuth 2.0, OIDC, SAML, adaptive MFA, and API security.
• Experience securing REST APIs and microservices architectures.
• Experience in healthcare or other regulated environments.
• Experience supporting HIPAA compliance and audits.
• Ability to thrive in a sense-of-urgency environment and leverage best practices
• Proficiency in Agile project management methodology.
• Hands-on experience with Microsoft Azure, Azure AD (AAD), AAD Connect, ADFS, SailPoint ISC, and Office 365
• Ability to author and edit scripts, such as PowerShell, VBS, or similar
• Experience with any Identity Management and Access Governance tools such as SailPoint, including custom development.
• Expert ability to use Visio and infographic based visual aids in articulating solution design, integration, onboarding of applications.
• Excellent documentation and communication skills
• Experience collaborating with Digital Product, Engineering, Privacy, and Clinical teams
• Ability to operate in high-availability healthcare environments

Language & Communication Skills

• Ability to effectively communicate both verbally and written with all levels within the organization
• Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups
• Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills
• Ability to work well within a team environment, as well as independently

Preferred

• Bachelor’s degree or higher in Computer Science, Computer Engineering, Technology Information Systems Engineering or related technical discipline
• Experience with patient portals, digital front door initiatives, and cloud platforms (Azure/AWS)
• Experience designing identity solutions for high-scale environments (100k+ users
• Okta Certified Administrator or Consultant.
• CISSP, CISM, or HCISPP certification.

The posted pay range is for a 40-hour workweek (1.0 FTE). The actual rate of pay offered within this range may depend on several factors, such as FTE, skills, knowledge, relevant education, experience, and market conditions. Additionally, our organization values pay equity and considers the internal equity of our team when making any offer. Hiring at the maximum of the range is not typical. If your role is eligible for a sign-on bonus, the bonus program that is approved and in place at the time of offer, is what will be honored.