Senior Security Engineer, Oscar Health

• 4+ years of relevant experience in Identity engineering
• Experience designing or implementing identity and access management controls for enterprise systems, cloud environments, SaaS platforms, or internally built applications
• Strong understanding of least privilege, role-based and attribute-based access control, privileged access patterns, identity lifecycle management, and access review processes
• Hands-on experience with identity platforms such as Okta, Google Workspace Identity, and Google Cloud permission models
• Working knowledge of authentication and authorization protocols such as SAML, OAuth, OIDC, SCIM, LDAP, and related session, token, and federation patterns
• Experience partnering with software engineering teams to review permission models, design secure authorization patterns, and improve access controls in custom applications
• Ability to reason about identity telemetry, detection logic, high-risk configuration states, and incident response workflows
• Strong written and verbal communication skills, including the ability to explain identity risk and architecture tradeoffs to technical and non-technical audiences

Desirable

• As an Identity and Access Management Engineer, you will build Oscar's identity and access management disciplines across internally built applications, standard identity platforms such as Okta and Google Workspace Identity, AWS-hosted systems, and the BigQuery data lake
• You will design least privilege access models, create enterprise identity architectures, and build identity threat detection and response capabilities that protect workforce, internal application, and customer identity surfaces
• You will report to the Associate Director, Platform Security