Why we’re looking for you
Generative AI is changing the way businesses operate, traditional IAM controls need to evolve. As the Staff Software Engineer for security engineering you will set the technical vision to ensure Tempus’ patients records and IP are safely utilized by the latest technologies.
You have experience setting the technical vision and direction for a product area, advocating for proven design principles and technology choices.
You know when to implement identity standards, and where they need to be innovated on.
You've got several years of experience working on software development teams, and are confident leading technical analysis & design, evaluating tradeoffs, leading build and buy decisions from a technical perspective, and establishing best practices.
You have experience developing and securing distributed, event-based systems at an interesting scale of transaction and/or data volume
You've worked in fast-paced, agile environments and helped keep projects on track, troubleshoot roadblocks, write documentation, and coordinate cross-team collaboration.
You collaborate well with diverse, talented teams while mentoring and learning from team members regardless of experience level.
You have experience working with cloud infrastructure providers (Amazon Web Services, Google Cloud, etc), and related tools like Docker, Terraform, or Kubernetes.
You have familiarity with an identity management platform like Auth0, Okta, Microsoft Entra, or Ping Identity.
You are a polyglot coder - you have experience with and are comfortable using a variety of programming languages and frameworks, and picking up new ones.
Bonus points for
Deep knowledge of identity standards like OAuth, SCIM, and SAML
Experience with TypeScript, JavaScript, Node.JS, or Python.
Experience with OAuth 2.1 emerging agentic controls
Experience with Chronicle or other SIEMs
Experience with various Authorization models, RBAC, ReBAC, ABAC, and PBAC and their implementation tradeoffs
Responsibilities for the position
Lead technical decisions for the security engineering team and implement best in class customer identity management, authorization, and observability systems across the business.
Manage and improve the existing security microservices, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.
Work with a variety of teams cross-functionally to implement internal standards for security across a microservice driven architecture.
Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.
Discover deficiencies in engineering tooling, designs, and processes and make the case for and driving improvements.
Help level-up engineering practice across Tempus through documentation, mentorship, training, and engagement with engineers.
Present new technologies and ideas to the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.
Lead build/buy decisions in the security domain to improve the velocity of engineering, drive down costs, and ensure secure technical excellence.
CHI: $200,000 - $260,000
CA: $240,000 - $310,000
The expected salary range above is applicable if the role is performed from California and may vary for other locations (Colorado, Illinois, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.
Additionally, for remote roles open to individuals in unincorporated Los Angeles – including remote roles- Tempus reasonably believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: engaging positively with customers and other employees; accessing confidential information, including intellectual property, trade secrets, and protected health information; and appropriately handling such information in accordance with legal and ethical standards. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
