Security Engineer, Crossover Health

• The ideal candidate will bring technical depth in identity systems such as Okta, a passion for automation, and a commitment to continuous improvement of access governance and lifecycle management
• 6+ years of experience in Information Security or IT with a focus on IAM
• 2+ years of hands-on experience administering Okta or equivalent enterprise IAM platforms
• Proven experience building and maintaining SSO/SAML/OIDC integrations
• Proficiency with Okta Workflows, Okta APIs, and automation using scripting (e.g., Python, PowerShell)
• Familiarity with modern authentication standards (SAML, OAuth2, OIDC, SCIM, MFA)
• Experience implementing RBAC, JIT provisioning, and lifecycle management across multiple environments
• Strong understanding of IAM principles, Zero Trust architecture, and security best practices
• Demonstrated ability to partner effectively across Security, IT, and HR functions
• Experience supporting audits, compliance reviews, or SOX/SOC2-related access controls
• Excellent communication, documentation, and problem-solving skills
• Ability to manage competing priorities in a dynamic, fast-paced environment
• Available to work after hours and weekends as needed

Desirable

• This role will be responsible for building and operating Crossover’s enterprise Identity and Access Management (IAM) program
• The Security Engineer (IAM) will focus on building and managing identity services that enable secure, seamless, and scalable user access across the organization
• Identity Platform Administration: Serve as the primary administrator for Okta and other IAM platforms, managing user identities, access policies, and integrations with internal and third-party applications
• SSO / SAML Integrations: Design, configure, and maintain SSO and SAML/OIDC integrations to enable secure and efficient authentication for both internal and external users across SaaS and custom applications
• Access Automation: Develop and deploy Okta Workflows and APIs to automate identity lifecycle events, access requests, access grants, and deprovisioning processes to ensure timely and compliant access control
• Access Governance: Collaborate with Security, HR, and IT to implement access review programs and ensure role-based access control (RBAC), least privilege, and segregation of duties across the environment
• Policy Enforcement: Translate security policies and compliance requirements into technical IAM controls and configurations, ensuring alignment with company policies and industry best practices
• Incident Support: Support incident response and audit activities by providing identity-related data, analysis, and remediation recommendations for access-related events or anomalies
• Documentation and Training: Maintain detailed documentation of identity systems, integrations, and workflows, and provide training and guidance to IT and business stakeholders on access management best practices