This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description We are looking for a hybrid IAM Engineer and Integration Specialist who understands that identity is the foundation of business operations. In this role, you won't just manage logins; you will build the Integration/Orchestration Infrastructure that powers our most critical revenue cycles. As an IAM Engineer, you will play a critical role in securing our systems and data. You will have the opportunity to work with cutting-edge IAM technologies, collaborate with cross-functional teams, and influence the development of our IAM strategy. Your work will directly impact the security and efficiency of our operations. You will be responsible for ensuring that our AI Infrastructure and Data Infrastructure are securely accessible and perfectly synced with our business logic, primarily focusing on the Revenue automation pipeline. Our team is responsible for overseeing all aspects of automation & security at Komodo Health. We implement and maintain security solutions to protect our systems and data, manage identity and access controls, and handle incident response. We also conduct security assessments, monitor for potential threats, and collaborate with other teams to ensure compliance with security policies and regulations. Our goal is to create a secure and resilient environment that supports the company's growth and innovation. Looking back on your first 12 months at Komodo Health, you will have accomplished: - Identity Lifecycle Management: Design and maintain automated onboarding, offboarding, and departmental transfer processes across our ecosystem (WorkDay, Okta, Google Workspace, etc.). - Integration & Orchestration: Build and optimize complex, multi-step automation flows. Assist with maintaining and growing our iPaaS (Workato) environment, treating "Integrations as a Product." Build resilient, scalable "recipes" that move data across the enterprise while maintaining strict IAM governance utilizing Okta Workflows. - Access Governance: Implement and enforce Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models. - Security & Compliance: Manage SSO (SAML/OIDC) and MFA configurations. Ensure all access remains compliant with [SOC2/HIPAA/GDPR] standards through regular access reviews and audit logging. - Custom Tooling: Develop custom scripts (Python, Perl, Ruby, etc.) and API integrations to bridge gaps where out-of-the-box connectors are unavailable. - Data & AI Infrastructure Support: Secure the "Data Perimeter." Ensure that data scientists and AI models have the correct, least-privileged access to our Data Infrastructure (Data Lakes/Warehouses). Manage the identity lifecycle for AI Agents and Service Accounts, ensuring that automated "non-human" workers are governed with the same rigor as employees. - Business Process Optimization: Collaborate with HR, Finance, Sales Ops and other teams to identify bottlenecks in the lead-to-revenue lifecycle and solve them through identity-driven automation. You will accomplish these outcomes through the following responsibilities: - Collaborate with cross-functional teams. - Improve provisioning/deprovisioning processes. - Integrate and manage IdPs within the IAM system. - Handle and streamline access requests. - Develop and implement IAM policies and procedures. - Respond to ad-hoc requests. Qualifications - Scripting: Proficiency in Python, Ruby or other languages for automating repetitive tasks and handling large-scale data imports/exports. - Automation Mindset: Leveraging technology with a proven ability to build event-driven flows, use custom API connectors, and handle error logic. - APIs: Comfortable working with RESTful APIs, JSON, and Webhooks. - Infrastructure as Code: Experience using Terraform or Github to manage identity providers. - Security Mindset: Understanding of Zero Trust architecture and Privileged Access Management (PAM) tools like CyberArk, BeyondTrust, etc. - 5–8+ years of experience in Identity and Access Management, including significant hands-on expertise with Okta (including OIE & OIG). - Strong understanding of identity lifecycle management, directory services, SSO, MFA, SCIM provisioning, and federation (SAML, OIDC, OAuth). - Proven experience partnering with HR, Finance, Compliance, and other cross-functional teams to design and implement IAM & Enterprise solutions. - Demonstrated ability to streamline and automate processes using automation. - Experience with auditing, governance, and access certification processes. - Excellent problem-solving, communication, and stakeholder management skills. Requirements - Experience with Workato or similar Integration Orchestrator tools such as Zapier, Snaplogic or Merge. - Experience with Okta Workflows. - Certifications: Workato or Okta Certified Professional/Administrator/Consultant. - Experience integrating IAM with HR systems (e.g., Workday). - Knowledge of compliance requirements related to IAM. - Background in cloud platforms (AWS, GCP, Azure) and IAM integrations. - Experience with IAM tools such as Auth0, or Azure AD. Company Description At Komodo Health, our mission is to reduce the global burden of disease. And we believe that smarter use of data is essential to this mission. That’s why we built the Healthcare Map — the industry’s largest, most complete, precise view of the U.S. healthcare system — by combining de-identified, real-world patient data with innovative algorithms and decades of clinical experience. As we pursue these goals, it remains essential to us that we stay grounded in our values: be awesome, seek growth, deliver “wow,” and enjoy the ride. At Komodo, you will be joining a team of ambitious, supportive Dragons with diverse backgrounds but a shared passion to deliver on our mission to reduce the burden of disease — and enjoy the journey along the way.

• Manage enterprise firewalls, including Cisco Meraki, SonicWall, and Fortinet. • Monitor and respond to security alerts using XDR, RMM, and SIEM platforms. • Lead incident response, breach remediation, and root-cause analysis. • Administer Bitdefender Endpoint Protection and similar endpoint security tools. • Secure the Microsoft 365 tenant, including Defender, identity protection, and conditional access policies. • Support SOC 2 and ISO 27002 compliance activities. • Collaborate with internal teams to support telecom-specific applications and integrations. • Monitor system performance, troubleshoot issues, and provide timely resolutions to minimize downtime. • Ensure compliance with telecom industry standards, data protection regulations, and company policies. • Create and maintain documentation for system configurations, processes, and troubleshooting guides. • Perform Windows Server and Linux administration. • Manage user accounts, access permissions, and IT resources across enterprise systems. • Support and maintain virtualization platforms (VMware and Hyper-V). • Perform networking fundamentals and troubleshooting. • Provide technical support to end users, ensuring effective communication and timely resolution of IT-related concerns. • Research and recommend technology upgrades or enhancements to optimize IT operations. • Stay current with the latest IT trends and best practices relevant to the telecom sector.

• Ensure robust security posture of our product across various components • Lead initiatives for incident monitoring, intrusion detection, and vulnerability management • Define and implement regular security auditing procedures across systems and access controls • Deliver a sustainable process for vendor risk assessments and other security-related initiatives • Ensure secure configurations and permission models while collaborating with engineering teams • Identify gaps between claimed and actual compliance and propose/lead corrective actions • Own documentation of security controls, configurations, and policies • Engage with internal stakeholders to evaluate different security threats and attack vectors • Generate and distribute internal audit and compliance reports at regular intervals

• Lead end-to-end delivery of Cisco ISE and Firepower projects: discovery, High-level Design (HLD), Low-level Design (LLD), build, cutover, validation, documentation, and knowledge transfer. • Facilitate workshops to gather requirements, assess current state, and map outcomes to best practices and security frameworks (e.g., Zero Trust, NIST). • Create SOW inputs (scope, assumptions, milestones) and delivery artifacts (migration plans, rollback plans, test plans, runbooks). • Architect and deploy ISE in standalone and distributed personas (PAN/MnT/PSN), including HA and scale considerations. • Design 802.1X and MAB policies for wired/wireless, RADIUS/TACACS+ services, device profiling, posture assessment, and Guest/BYOD onboarding flows. • Build authorization policies using security group tags (SGT/TrustSec), dACLs, and dynamic VLANs; integrate with Active Directory/LDAP, PKI, Duo, and AnyConnect posture modules. • Design and implement FTD (physical and virtual appliances) managed by FMC (HA, clustering, multi-context where applicable).