• Serve as the authoritative expert on cybersecurity frameworks, attack vectors, and enterprise defense strategies. • Analyze emerging threats, vulnerabilities, and advanced persistent threats (APT) to inform strategy. • Advise executive leadership and project teams on risk mitigation, regulatory compliance, and best practice security measures. • Develop, review, and enforce cybersecurity policies, standards, and operating procedures. • Conduct cybersecurity audits, assessments, and penetration testing to validate system integrity. • Collaborate with IT, Risk, Legal, and Business Units to ensure consistent cybersecurity application across all organizational processes. • Participate in incident response activities, providing expertise to contain, mitigate, and assess cyber incidents.

Description seeking a highly skilled Senior PAM & Identity Engineer to lead and mature our Privileged Access Management (PAM) and Identity Governance & Administration (IGA) ecosystem. This role is critical in advancing our mission to eliminate standing privileges, secure high‑value credentials, and strengthen governance across a complex hybrid environment. This position will support the Identity Access & Governance team, which includes developers and IAM SMEs. Key Responsibilities Privileged Access Management (PAM) • Lead the architecture, scaling, and administration of Delinea Secret Server Cloud, including Distributed Engines, Secret Policies, and enterprise workflows. • Design and implement secure credential management processes, including: ○ Heartbeat ○ Remote Password Changing (RPC) ○ Check‑out/check‑in ○ Service and root account rotation • Develop and enforce Least Privilege strategies within Delinea Privilege Manager, removing local admin rights while enabling required task elevation. Identity Governance & Cloud Security • Manage integration and interoperability between Saviynt, Azure/Entra ID, and cloud control planes. • Configure and maintain Azure/Entra PIM including: ○ Just‑In‑Time (JIT) role activation ○ Conditional Access ○ Managed Identities • Support onboarding of non‑human identities and hundreds of business‑critical applications—many with legacy or static credentials requiring modernization and compliance alignment. Automation & Integration • Develop automation using PowerShell or Python, including API integrations for secret lifecycle management and bulk operations. • Integrate PAM and IGA systems with: ○ Active Directory ○ SIEM platforms (e.g., Microsoft Sentinel) ○ ITSM platforms such as ServiceNow. Skills IAM, Delinea, Secret Server Cloud, Azure AD, Entra ID, PowerShell, Python, API Top Skills Details IAM,Delinea,Secret Server Cloud,Azure AD,Entra ID,PowerShell,Python,API Additional Skills & Qualifications Preferred Qualifications • Background in software development or engineering-focused automation. • Experience with Saviynt for identity governance. Demonstrated ability to operate at an L3+ level, lead complex troubleshooting efforts, and drive technical strategy. Experience Level Intermediate Level Job Type & LocationThis is a Contract position based out of Lake Forest, IL. Pay and BenefitsThe pay range for this position is $50.00 - $60.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: • Medical, dental & vision • Critical Illness, Accident, and Hospital • 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available • Life Insurance (Voluntary Life & AD&D for the employee and dependents) • Short and long-term disability • Health Spending Account (HSA) • Transportation benefits • Employee Assistance Program • Time Off/Leave (PTO, Vacation or Sick Leave) Workplace TypeThis is a fully remote position. Application DeadlineThis position is anticipated to close on Mar 26, 2026. h4>About TEKsystems: We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

Garner’s mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role:We are seeking an exceptional Senior Security Engineer to join our Security Engineering team. As a Senior Security Engineer, you will play a key part in the protection of our most important asset: patient data. The Security Engineering team at Garner is responsible for securing cloud infrastructure, creating secure code guardrails, and maintaining trust with clients. This is a role that will have diverse projects that address multiple areas of security. Where you will work:This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: - Provide technical leadership in securing networks, systems, applications, and databases - Participate in our Security Engineering on-call rotation to respond to security incidents - Embed security into the build pipeline through automated SAST/DAST testing and policy enforcement - Oversee vulnerability management and associated remediation efforts - Educate engineers and advocate for a Security oriented culture across the engineering organization The ideal candidate has: - 3-5 years in Security Engineering, ideally with at least 2 years in a B2B organization - Strong proficiency in cloud security (e.g., AWS IAM, GuardDuty, KMS or equivalent) - Experience with Infrastructure as Code - Background in Application Security and securing RESTful APIs - Familiarity with modern IAM solutions - A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback Technologies we use: - Python, TypeScript, React, NodeJS, Kubernetes, Istio, Postgres, ElasticSearch, NATS, AWS, Terraform This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Compensation Transparency:The target salary range for this position is $182,000 - $225,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com. Equal Employment Opportunity:Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.

Meet Upside: We created Upside to transform brick-and-mortar commerce. Our technology uses the sophistication of online retail—profit measurement, attribution, and incrementality—to provide users with more value on their everyday purchases and brick-and-mortar businesses with new, profitable customers. We’ve helped millions of users earn 2 to 3 times more cashback than any other product, and hundreds of thousands of brick-and-mortar businesses earn measurable profit. Billions of dollars in commerce run through the Upside platform every year, and that value goes directly back to our retailer partners, the consumers they serve, and important sustainability initiatives. The Impact You’ll Make: You’ll report into the Director, Information Security and build relationships with technology stakeholders. You’ll leverage your knowledge of cloud security best practice and payment systems to identify and remediate cloud vulnerabilities. This individual contributor role will innovate for our Cloud Security team, increase our Cloud Security posture and enable our engineers to code safely. What you’ll do: - Innovate with AI and deliver security solutions to mitigate infrastructure vulnerabilities - Codify IAC compliance standards in Terraform, Python and/or OPA - Run IAC security scans and partner with engineers to fix unsafe code - Engage technology teams to review, document and communicate risks - Provide technical guidance and mentorship to other security engineers - Ensure compliance with relevant security regulations and standards - Interact with the security community and keep aware of trends What you need: - 6+ years of cloud security inclusive of fixing code in Terraform, Python or Java - Deep knowledge of AWS and Lambda security architecture and AWS Control Tower - Bachelor’s degree in Computer Science or Engineering highly preferred - Willingness to learn, adapt, fail and grow (professional growth mindset) - Strong understanding and adoption of AI technologies - Background in DevSecOps and Network Engineering preferred - Exceptional customer service and people skills Our technology stack: - Github Suite (Advanced Security, Actions, Copilot) - Python - Terraform - AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs - ChatGPT - Snowflake - SQL Location: This role offers location flexibility, however, if you’re based in the Washington, D.C., Austin, Chicago, or NYC metropolitan regions, in-office attendance is required on a hybrid basis. Compensation: The US base salary range for this full-time position is $210,000 - $230,000 + equity + benefits. The final starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. Your recruiter can share more about the specific salary range during the hiring process. #LI-Hybrid #LI-NE1 Benefits: - Medical, dental, and vision coverage starting on Day 1 - Equity (ISOs) - 401(k) program - Family planning programs + paid parental leave - Physical fitness and wellness memberships - Emotional and mental health support programs - Unlimited PTO + 10 paid federal holidays + our annual, week-long Winter Break - Flexible work environment - Lunch reimbursement for in-office employees - Employee Resource Groups - Learning and Development stipend - Transparent culture - Amazing mission! Diversity and Inclusion: Diversity drives innovation, and our differences make us stronger. We‘re passionate about building a workplace that represents a variety of backgrounds, skills, and perspectives, and we do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Everyone is welcome here! If there's anything we can do to support a disability or special need during your application or interview process, please email accommodations@upside.com. This email is for accessibility accommodations only, it should not be used to submit job applications. Notice To Recruiters And Placement Agencies: This is an in-house search with a dedicated recruiter. Please do not submit resumes to any person or email address at Upside. Upside is not liable for, and will not pay, placement fees for candidates submitted by any party or agency other than its approved recruitment partners.