Staff Information Security Engineer - IntelliScript (Remote)

Milliman IntelliScript is hiring a Staff Information Security Engineer to improve and maintain its security programs, infrastructure, and processes. The role develops and executes security initiatives, responds to threats and incidents, supports compliance, and partners with platform and software teams to integrate security practices into products and development.

Responsibilities:

• Manage and improve Identity Access Management programs
• Improve, monitor and maintain our Information Security Program
• Execute security initiatives related to infrastructure, product and data
• Contribute to the strategic planning of security work, make strategic recommendations and improvements to our security
• Work with application developers to improve the security of various product features
• Design and implement security controls and measures to protect our application and data
• Monitor and analyze security events and incidents and respond promptly to security breaches
• Collaborate with development teams to integrate security best practices throughout the software development lifecycle
• Identify and prioritize security vulnerabilities and develop strategies for mitigation
• Proactively prepare and train developers and raise the security awareness of everyone in the organization
• Quickly and proactively respond to incoming security threats
• Continually assess, address and report on the levels of threat and preparedness
• Assist in maintaining compliance with industry standards relevant to our organization

Requirements:

• 10+ years of relevant experience
• 5+ years of experience with Identity Access Management
• 5+ years of hands-on technical engineering experience
• Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity
• Strong understanding of IAM protocols like OAuth, SAML, OIDC and LDAP
• Experience in configuration of IAM solutions for API web and web authentication use cases
• Experience building, supporting, and securing cloud-based web infrastructure with AWS
• Strong understanding of Cryptography, Authentication, Authorization, Secrets Management, Data Security, Web Tech Stack, and Cloud Security
• Experience in DevSecOps with relevant tech stack knowledge (e.g. Git, Docker, Windows, SIEM, AWS Security products, Terraform)
• Knowledge of security best practices for building web applications
• Experience with secure coding practices and security frameworks (OWASP, NIST, CIS etc.)
• Understanding of and ability to deal with and prevent security threats
• Working knowledge of Software Engineering and Deployments (CI/CD pipelines, SCM etc.)
• Ability to conduct security assessments of applications
• Demonstrates urgency and willingness to get things done
• Has a thorough understanding of the field and seeks to enhance technical expertise by staying up to date with industry trends, best practices, and emerging technologies
• Leads problem solving resolution initiatives, integrates cross-functional perspectives, and ensures sustainable outcomes
• Communicates complex information clearly and produces comprehensive documentation with minimal supervision
• Drives projects and tasks forward, making informed decisions and taking responsibility for outcomes
• Collaborates effectively with team members to overcome obstacles, meet deadlines, and achieve shared objectives
• Proactively identifies advanced learning opportunities, mentors peers, and continuously updates skills to maintain industry relevance
• Leads organizational risk management initiatives, designs advanced risk mitigation and contingency plans
• Proactively addresses issues within the team, facilitating open communication
• Takes on additional responsibilities or roles within the team, demonstrating accountability and a commitment to shared objectives
• Willingness to stay current and a commitment to professional development
• Continued education and/or advanced degree(s)
• Industry certifications
• Experience in environments subject to HITRUST, HIPAA and/or PCI regulations
• Experience in software-as-a-service, actuarial science, and/or insurance industry