IAM Architect

We Breathe Life Into Data At OpenKyber, our mission is to reduce the global burden of disease. And we believe that smarter use of data is essential to this mission. That's why we built the Healthcare Map - the industry's largest, most complete, precise view of the U.S. healthcare system - by combining de-identified, real-world patient data with innovative algorithms and decades of clinical experience. The Healthcare Map serves as our foundation for a powerful suite of software applications, helping us answer healthcare's most complex questions for our partners. Across the healthcare ecosystem, we're helping our clients unlock critical insights to track detailed patient behaviors and treatment patterns, identify gaps in care, address unmet patient needs, and reduce the global burden of disease. As we pursue these goals, it remains essential to us that we stay grounded in our values: be awesome, seek growth, deliver "wow," and enjoy the ride. At OpenKyber, you will be joining a team of ambitious, supportive Dragons with diverse backgrounds but a shared passion to deliver on our mission to reduce the burden of disease - and enjoy the journey along the way.

The Opportunity at OpenKyber Health We are looking for a hybrid IAM Engineer and Integration Specialist who understands that identity is the foundation of business operations. In this role, you won't just manage logins; you will build the Integration/Orchestration Infrastructure that powers our most critical revenue cycles. As an IAM Engineer, you will play a critical role in securing our systems and data. You will have the opportunity to work with cutting-edge IAM technologies, collaborate with cross-functional teams, and influence the development of our IAM strategy. Your work will directly impact the security and efficiency of our operations. You will be responsible for ensuring that our AI Infrastructure and Data Infrastructure are securely accessible and perfectly synced with our business logic, primarily focusing on the Revenue automation pipeline.

Our team is responsible for overseeing all aspects of automation & security at OpenKyber Health. We implement and maintain security solutions to protect our systems and data, manage identity and access controls, and handle incident response. We also conduct security assessments, monitor for potential threats, and collaborate with other teams to ensure compliance with security policies and regulations. Our goal is to create a secure and resilient environment that supports the company's growth and innovation.

Looking back on your first 12 months at OpenKyber Health, you will have accomplished...

• Identity Lifecycle Management: Design and maintain automated onboarding, offboarding, and departmental transfer processes across our ecosystem (WorkDay, Okta, Google Workspace, etc.).
• Integration & Orchestration: Build and optimize complex, multi-step automation flows. Assist with maintaining and growing our iPaaS ( Workato ) environment, treating "Integrations as a Product." Build resilient, scalable "recipes" that move data across the enterprise while maintaining strict IAM governance utilizing Okta Workflows .
• Access Governance: Implement and enforce Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Security & Compliance: Manage SSO (SAML/OIDC) and MFA configurations. Ensure all access remains compliant with [SOC2/HIPAA/GDPR] standards through regular access reviews and audit logging.
• Custom Tooling: Develop custom scripts (Python, Perl, Ruby, etc.) and API integrations to bridge gaps where out-of-the-box connectors are unavailable.
• Data & AI Infrastructure Support: Secure the "Data Perimeter." Ensure that data scientists and AI models have the correct, least-privileged access to our Data Infrastructure (Data Lakes/Warehouses). Manage the identity lifecycle for AI Agents and Service Accounts, ensuring that automated "non-human" workers are governed with the same rigor as employees.
• Business Process Optimization: Collaborate with HR, Finance, Sales Ops and other teams to identify bottlenecks in the lead-to-revenue lifecycle and solve them through identity-driven automation.

You will accomplish these outcomes through the following responsibilities...

• Collaborate with cross-functional teams.
• Improve provisioning/deprovisioning processes.
• Integrate and manage IdPs within the IAM system.
• Handle and streamline access requests.
• Develop and implement IAM policies and procedures.
• Respond to ad-hoc requests.

What you bring to OpenKyber Health (required):

• Scripting: Proficiency in Python, Ruby or other languages for automating repetitive tasks and handling large-scale data imports/exports.
• Automation Mindset: Leveraging technology with a proven ability to build event-driven flows, use custom API connectors, and handle error logic.
• APIs: Comfortable working with RESTful APIs, JSON, and Webhooks.
• Infrastructure as Code: Experience using Terraform or Github to manage identity providers.
• Security Mindset: Understanding of Zero Trust architecture and Privileged Access Management (PAM) tools like CyberArk, BeyondTrust, etc.
• 5-8+ years of experience in Identity and Access Management, including significant hands-on expertise with Okta (including OIE & OIG).
• Strong understanding of identity lifecycle management, directory services, SSO, MFA, SCIM provisioning, and federation (SAML, OIDC, OAuth).
• Proven experience partnering with HR, Finance, Compliance, and other cross-functional teams to design and implement IAM & Enterprise solutions.
• Demonstrated ability to streamline and automate processes using automation.
• Experience with auditing, governance, and access certification processes
• Excellent problem-solving, communication, and stakeholder management skills

Additional skills and experience we'd prioritize (nice to have)...

• Experience with Workato or similar Integration Orchestrator tools such as Zapier, Snaplogic or Merge.
• Experience with Okta Workflows.
• Certifications: Workato or Okta Certified Professional/Administrator/Consultant.
• Experience integrating IAM with HR systems (e.g., Workday).
• Knowledge of compliance requirements related to IAM.
• Background in cloud platforms (AWS, Google Cloud Platform, Azure) and IAM integrations.
• Experience with IAM tools such as Auth0, or Azure AD.

#LI-Remote The pay range for each job posting reflects a minimum and maximum range of annual base pay that we reasonably expect to pay for this position within the US. We carefully consider multiple business-related factors when determining compensation, including job-related skills, work experience, geographic work location, relevant training and certifications, business needs and market demands. The starting annual base pay for this role is listed below. This position may be eligible for performance-based bonuses as determined in the Company's sole discretion and in accordance with a written agreement or plan. This role may also be eligible for equity awards. In addition, this role is eligible for benefits including, but not limited to, comprehensive health, dental, and vision insurance; flexible time off and holidays; 401(k) with company match; disability insurance and life insurance; and leaves of absence in accordance with applicable state and local laws and regulations and company policy.

San Francisco Bay Area and New York City: $173,000-$210,000 USD All Other US Locations: $150,000-$180,000 USD OpenKyber's AI Standard At OpenKyber, we're not just witnessing the AI revolution - we're leading it. This is a pivotal moment in time, where being first to market with AI transforms industries and sets the bar. We've already established industry leadership in leveraging AI to revolutionize healthcare, and we expect every team member to contribute. AI here isn't optional; it's foundational. We expect you to integrate AI into your daily work - from summarizing documents to automating workflows and uncovering insights. This isn't just about efficiency; it's about making every moment more meaningful, building on trust in AI, and driving our collective success. Join us in shaping the future of healthcare intelligence.

Where You'll Work OpenKyber Health has a hybrid work model with hubs in San Francisco, New York City, and Chicago. Roles vary - some can be performed from anywhere in the country, others are scoped to a specific region, and some are based near one of our hubs. For hub-based Dragons, we're building intentional in-office rhythms alongside the flexibility that's core to how we work. Whatever your setup, expectations will always be clear before you join.

Equal Opportunity Statement OpenKyber Health provides equal employment opportunities to all applicants and employees. We prohibit discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. By submitting your application, you acknowledge that you have read and understand OpenKyber Health's Privacy Notice for Employees and Contractors. This notice explains how we collect, use, and retain applicant data.

For applications and inquiries, contact:View email address on us.fitly.work