This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description We are looking for a hybrid IAM Engineer and Integration Specialist who understands that identity is the foundation of business operations. In this role, you won't just manage logins; you will build the Integration/Orchestration Infrastructure that powers our most critical revenue cycles. As an IAM Engineer, you will play a critical role in securing our systems and data. You will have the opportunity to work with cutting-edge IAM technologies, collaborate with cross-functional teams, and influence the development of our IAM strategy. Your work will directly impact the security and efficiency of our operations. You will be responsible for ensuring that our AI Infrastructure and Data Infrastructure are securely accessible and perfectly synced with our business logic, primarily focusing on the Revenue automation pipeline. Our team is responsible for overseeing all aspects of automation & security at Komodo Health. We implement and maintain security solutions to protect our systems and data, manage identity and access controls, and handle incident response. We also conduct security assessments, monitor for potential threats, and collaborate with other teams to ensure compliance with security policies and regulations. Our goal is to create a secure and resilient environment that supports the company's growth and innovation. Looking back on your first 12 months at Komodo Health, you will have accomplished: - Identity Lifecycle Management: Design and maintain automated onboarding, offboarding, and departmental transfer processes across our ecosystem (WorkDay, Okta, Google Workspace, etc.). - Integration & Orchestration: Build and optimize complex, multi-step automation flows. Assist with maintaining and growing our iPaaS (Workato) environment, treating "Integrations as a Product." Build resilient, scalable "recipes" that move data across the enterprise while maintaining strict IAM governance utilizing Okta Workflows. - Access Governance: Implement and enforce Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models. - Security & Compliance: Manage SSO (SAML/OIDC) and MFA configurations. Ensure all access remains compliant with [SOC2/HIPAA/GDPR] standards through regular access reviews and audit logging. - Custom Tooling: Develop custom scripts (Python, Perl, Ruby, etc.) and API integrations to bridge gaps where out-of-the-box connectors are unavailable. - Data & AI Infrastructure Support: Secure the "Data Perimeter." Ensure that data scientists and AI models have the correct, least-privileged access to our Data Infrastructure (Data Lakes/Warehouses). Manage the identity lifecycle for AI Agents and Service Accounts, ensuring that automated "non-human" workers are governed with the same rigor as employees. - Business Process Optimization: Collaborate with HR, Finance, Sales Ops and other teams to identify bottlenecks in the lead-to-revenue lifecycle and solve them through identity-driven automation. You will accomplish these outcomes through the following responsibilities: - Collaborate with cross-functional teams. - Improve provisioning/deprovisioning processes. - Integrate and manage IdPs within the IAM system. - Handle and streamline access requests. - Develop and implement IAM policies and procedures. - Respond to ad-hoc requests. Qualifications - Scripting: Proficiency in Python, Ruby or other languages for automating repetitive tasks and handling large-scale data imports/exports. - Automation Mindset: Leveraging technology with a proven ability to build event-driven flows, use custom API connectors, and handle error logic. - APIs: Comfortable working with RESTful APIs, JSON, and Webhooks. - Infrastructure as Code: Experience using Terraform or Github to manage identity providers. - Security Mindset: Understanding of Zero Trust architecture and Privileged Access Management (PAM) tools like CyberArk, BeyondTrust, etc. - 5–8+ years of experience in Identity and Access Management, including significant hands-on expertise with Okta (including OIE & OIG). - Strong understanding of identity lifecycle management, directory services, SSO, MFA, SCIM provisioning, and federation (SAML, OIDC, OAuth). - Proven experience partnering with HR, Finance, Compliance, and other cross-functional teams to design and implement IAM & Enterprise solutions. - Demonstrated ability to streamline and automate processes using automation. - Experience with auditing, governance, and access certification processes. - Excellent problem-solving, communication, and stakeholder management skills. Requirements - Experience with Workato or similar Integration Orchestrator tools such as Zapier, Snaplogic or Merge. - Experience with Okta Workflows. - Certifications: Workato or Okta Certified Professional/Administrator/Consultant. - Experience integrating IAM with HR systems (e.g., Workday). - Knowledge of compliance requirements related to IAM. - Background in cloud platforms (AWS, GCP, Azure) and IAM integrations. - Experience with IAM tools such as Auth0, or Azure AD. Company Description At Komodo Health, our mission is to reduce the global burden of disease. And we believe that smarter use of data is essential to this mission. That’s why we built the Healthcare Map — the industry’s largest, most complete, precise view of the U.S. healthcare system — by combining de-identified, real-world patient data with innovative algorithms and decades of clinical experience. As we pursue these goals, it remains essential to us that we stay grounded in our values: be awesome, seek growth, deliver “wow,” and enjoy the ride. At Komodo, you will be joining a team of ambitious, supportive Dragons with diverse backgrounds but a shared passion to deliver on our mission to reduce the burden of disease — and enjoy the journey along the way.

• Implement, maintain, and upgrade security infrastructure for the monitoring, triage, and remediation of security events. • Engage with engineering and assist in the design and implementation of cloud workload and orchestration platforms and a secure cloud infrastructure. • Drive operational efficiencies with the skillful application of AI, ML, and automation, recreating processes to be non-human centric. • Work with product and engineering teams to mitigate risks and vulnerabilities in Astronomer products and infrastructure. • Work with engineering and IT teams to ensure and assist in collecting evidence of security and compliance controls. • Respond to emergencies when needed, coordinating with other technical teams to assess, scope, mitigate, and respond to threats or risks as they emerge.

• Oversee vendor onboarding, procurement workflows, and contract management • Ensure compliance with Third-Party Risk Management (TPRM) requirements • Support Physical Security, Security Engineering, Construction, and New Site Development teams • Collaborate closely with operations leadership, OEMs, vendors, and contractors to improve vendor experience • Resolve invoicing issues and facilitate vendor performance reviews • Drive operational efficiency and cost optimization

• Work in partnership with other FloQast IT teams to design, implement, and maintain corporate IT security systems, ensuring compliance • Lead third-party vendor and contractor security reviews • Audit and harden 3rd party SaaS systems for security best practices, leading remediation efforts • Ensuring security configurations across our corporate environment are documented and maintained • Regularly triage security events and ensure ongoing health of our Managed Detection & Response (MDR) partner • Own the analysis and documentation of security events & incidents, including investigating & escalating issues and participating in security event escalations • Maintaining existing compliance attestations and participating in risk assessment exercises • Lead vulnerability management efforts, ensuring issues are triaged, prioritized, and remediated according to defined SLA’s • Maintain and secure internal corporate endpoints (macOS and Windows) • Administer endpoint management platform for enterprise-wide monitoring and dash boarding • Participate in Agile scrum ceremonies for project and initiative tracking • Lead security awareness and training programs • Stay abreast of new and emerging security technologies and paradigms