IAM Engineer

Phreesia is looking for a IAM Specialist to join our growing Security Engineering team! 

In Security Engineering at Phreesia we maintain a diverse skillset, our team is comprised of engineers that have a focus in development, operations, and identity. As a team we operate with API forward approaches to make security easy, repeatable, and automated. The team fosters a culture of learning by doing and sharing. We work hard every day to grow and learn as a unit. 

At Phreesia we recognize that identity is a core function of everything we build and run. Authentication, Authorization, and Accounting (AAA) has never gone out of style and doing it well has been and always will be paramount to protecting resources. It is for these reasons that we have built a solid core foundation around identity. But we need your help… 

We want you to join our team and work with us to improve and build a world class identity infrastructure for our internal resources. We have all the toolsets and many of the building blocks. This role is about improving and extending our fundamentals to be amazingly well run and automated wherever possible. 

The Security Engineering team located in the larger Engineering team is a group of “doers”. We are a team of engineers who subscribe to newer principles of application design and by extension newer principles of securing the environment. We speak fluent 12 factor app and understand that the technical world is headed toward an “everything as code” nexus. The continuous delivery model, infrastructure as code, and slowly approaching serverless world don’t scare us, they energize us to build things from inception with deep rooted security principles and design. We are preparing for this and working diligently internally to help our engineering colleagues plan, prepare, execute and embrace the “new world”. 

Job Responsibilities 

• Analyze, design, develop, implement and support SailPoint integrations for Phreesia’s application portfolio.  Including the expansion of our SSO and provisioning portfolio to more internal applications. 

• Improve/Build Identity infrastructure (SailPoint, Okta, AWS SSO, AWS IAM, Azure AD) with an eye toward automation and API first approaches. 

• Be the subject matter expert on Phreesia’s identity platforms. You will know or learn  SailPoint, Okta, AWS SSO, AWS IAM, Active Directory, Azure AD to an expert level. 

• You’ll share responsibilities in knowledge and learning on password management solutions (CyberARK, Password Managers) 

• Provide other engineering team members with well-researched practical security advice to demonstrate real fixes to identity problems. 

• Field requests from our auditors (team activity) and use your creative brain to devise automation-based solutions to “old world” problems in audit. 

• Understand environmental threats and provide subject matter expertise, advice, and engineering resources to resolving these problems. 

• Advocate for security as a subject matter expert across multiple organizational structures 

• Be a part of a great security engineering team that is learning and growing focused. We will help you learn and grow in areas of your own security interest. 

Education : Bachelor's Degree required 

Experience, Knowledge & Skills :

What You’ll Bring: 

• 2-4 years experience 

• An insatiable desire to learn and grow 

• Governance knowledge 

• A deep knowledge of IGA systems in particular SailPoint 

• A deep knowledge of identity technology and patterns (SAML, SSO, IDP infra, openid, oauth… you can more than spell all these things. You know how they work) 

• A lean toward automation and doing 1:many tasks via scripting and development work. 

• As a team, we all have a respect for the DevSecOps Manifesto - “Through Security as Code, we have and will learn that there is simply a better way for security practitioners, like us, to operate and contribute value with less friction. We know we must adapt our ways quickly and foster innovation to ensure data security and privacy issues are not left behind because we were too slow to change.” – You track to this. 

Technology :

• IGA systems (SailPoint, Entra, Veza, Saviynt) 

• Cloud IAM (AWS, GCP, Azure/Entra) 

• Active Directory Domains (Cloud and on-prem) 

• SumoLogic 

• Wiz 

• Okta 

• 1Password 

• Akeyless 

• Secrets and Keys ​