Security Engineer, IAM

Oscar Health

New York City, NY, US
  • Job Type: Full-Time
  • Function: IT
  • Post Date: 01/13/2021
  • Website:
  • Company Address: 295 Lafayette Street, New York, NY, 10012

About Oscar Health

Health care is broken; we're trying to fix it. The Oscar team is focused on utilizing technology, design and data to humanize health care. We're a group of technology and health care professionals who looked at the current state of the US health care system, got frustrated by the horrible consumer experience, and decided to do something big about it. Backed by a renowned set of investors and advisors, we’ve set out to revolutionize health care.

Job Description

Hi, we're Oscar. We’re hiring a Security Engineer, Identity Access Management to join our Security team in our New York office. 

Oscar is a technology-driven, consumer-focused health insurance startup founded in 2012 and headquartered in New York City. Our goal is to make health insurance simple, transparent, and human. We need your help to do so.

About the role:

Taking care of our members includes securing their data. The mission of the Security team is to protect the data our customers have entrusted to us, and make it possible for Oscar management to make informed, risk-calibrated decisions. 

Identity and Access Management (IAM) is one of the most critical parts of security to get right. We are building out our IAM program to become a leader in the area. We’re looking for someone to help us achieve that mission and serve as a key contributor to the Security Team and its partner teams.


  • Contribute key input to the strategy Oscar will follow to achieve a robust and leading identity and access management program.
  • Architect, build, test, deploy, and monitor Oscar’s IAM systems and beyond.
  • Assess and address Oscar’s security risks.
  • Help build technical and non-technical processes, policies, and standards that reflect security best practices.
  • Engineer and facilitate cross-organizational access reviews.
  • Build and maintain mutual trust with key stakeholders in the company, such as Engineering, Legal, Compliance, and the People team.


  • Have 2+ years of career experience related to information security and/or software development.
  • Deep knowledge of identity and access management concepts (e.g. OAuth2, OpenID Connect, SAML, RBAC, ABAC, MFA) or a willingness to immerse yourself in the area.
  • Be able to write production-quality code in at least one programming language and an interest in learning more languages. We currently use Python, Javascript, and Go.
  • Knowledge of *nix systems.
  • Can communicate security risks to both technical and non-technical audiences.
  • Ability to build policies and standards that minimize Oscar’s security risks.

Life at Oscar: 

At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support. We're on a mission to change health care -- an experience made whole by our unique backgrounds and perspectives.

We encourage our members to care for their whole selves, and we encourage our employees to do the same with comprehensive medical benefits, generous paid-time off, paid parental leave, retirement plans, company social events, stocked kitchens, wellness programs, and volunteer opportunities.

Related Jobs

Site Reliability Engineer

Oscar Health - Tempe, AZ, US

Senior Site Reliability Engineer

Oscar Health - Tempe, AZ, US

Security Engineer, IAM

Oscar Health - New York City, NY, US

Manager, Market P+L - Central

Oscar Health - Chicago, IL, US

Senior Software Engineer, Data/Systems

Oscar Health - New York City, NY, US
Disclaimer: Local Candidates Only
This company does NOT accept candidates from outside recruiting firms. Agency contacts are not welcome.