Apply on Employer Site

Synthesis Health · 2 days ago

Staff Security Engineer

United States

Full-time

Remote

Senior Level, Lead/Staff

$150K/yr - $180K/yr

8+ years exp

Synthesis Health is a mission- and values-driven company dedicated to revolutionizing healthcare through innovation. They are seeking a Staff Security Engineer to own the identity management landscape and serve as the primary technical authority, leading high-stakes technical conversations with enterprise customers while ensuring compliance and security posture through automation.

Health CareMedicalWellness

Responsibilities

Own the Complete Identity Stack: You will architect the end-to-end identity strategy for the platform. This includes the token management infrastructure (minting, validation, rotation, revocation), session handling, and the rigorous implementation of identity standards (OIDC, SAML 2.0, OAuth 2.0)

Enterprise Technical Partnership: You will serve as the primary technical voice for Identity during critical pre-sales and onboarding conversations. You will lead technical deep dives with customer security teams, translating their complex legacy requirements into modern, secure integration patterns

Frictionless Federation: You will build the architecture for seamless hospital onboarding, automating the provisioning of users via upstream identity signals (SCIM, JIT provisioning) while ensuring Zero Trust principles are maintained

Compliance as Code: You will automate the evidence collection and enforcement of our compliance controls (ISO 27001, SOC2, HIPAA). You will build tooling that continuously monitors our cloud environment (GCP) for drift and auto-remediates violations

Audit Leadership: You will serve as the technical lead for external security audits, translating complex auditor requirements into engineering tasks and demonstrating our security posture through automated proofs

Secure Software Supply Chain: You will secure our CI/CD pipelines, implementing signing (Sigstore/Cosign), vulnerability scanning (SBOM), and secrets management strategies

Mentorship & Culture: You will elevate the security consciousness of the organization. You will mentor engineers on common vulnerability patterns (OWASP Top 10) and lead threat modeling sessions for critical new features

Qualification

IdentityAccess ManagementToken InfrastructureCompliance AutomationCloud Security (GCP/AWS)Application SecuritySAMLOIDCSOC2ISO 27001CISSPCCSPGoogle Professional Cloud Security EngineerHealthcare ExperienceSoft Skills