Jobs in the United States

25+ jobs

Save this search

Added just now
Principal Engineer - PVTP Architecture
General Motors LLC
Seattle, WA
In this senior individual-contributor role you will establish interfaces and decision rights across engineering, asset operations, test execution, automation, virtual test, infrastructure,…
Added 1 min ago
MS
Senior DevSecOps Engineer - Reston, VA
Military Spouse Jobs & VetJobs
United States
- $120,700 to $188,725 USD / year
Noblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.
Added 21 mins ago
Network Engineer - Collaboration & Enterprise Connectivity
Prologis Management LLC
Denver, CO · San Francisco, CA · Los Angeles, CA · Chicago, IL · NY · Seattle, WA
As a Network Engineer - Collaboration & Enterprise Connectivity, you will help deliver secure, reliable enterprise connectivity and production-ready voice and conference room experiences…
Added 32 mins ago
BR
Senior Development Test Engineer
Beyond Reach Labs
Brooklyn, NY
- $120,000 to $160,000 USD / year
As a Senior Development Test Engineer at BRL, you will lead the design, build, and operation of the test infrastructure that proves out our hardware. You will own test strategy and…
Added 40 mins ago
B
IT Operations Engineer
Blacksmith
New York City, NY
- $150,000 to $170,000 USD / year
We're hiring our first IT Operations Engineer to own the systems and workflows our employees rely on. You'll shape how IT operates at Blacksmith, from onboarding and device management to…
Added 43 mins ago
Site Reliability Engineer 2 - Production Engineering
Anduril Industries
Seattle, WA
We are seeking a Site Reliability Engineer 2 who is passionate about building resilient, highly available systems that scale to meet the demands of the core systems powering Lattice. You…
Added 43 mins ago
Site Reliability Engineer 2 - Production Engineering
Anduril Industries
Costa Mesa, CA · Seattle, WA
We are seeking a Site Reliability Engineer 2 who is passionate about building resilient, highly available systems that scale to meet the demands of the core systems powering Lattice. You…
Added 55 mins ago
O
Junior DevSecOps Engineer (Python, CI/CD)
OpenDataJobs
Washington, DC
- $80,000 to $95,000 USD / year
At Peregrine Advisors, you will share in operating the automation, continuous integration and continuous delivery (CI/CD) pipelines, and secure cloud infrastructure that keep federal…
Added 1 hour ago
Software Engineer
Compeer Financial
Mankato, MN · Bloomington, IL · Sun Prairie, WI
…AI agents for coding, testing, analysis, documentation, and automation while critically validating outputs, protecting sensitive information, maintaining human accountability, and…
Added 1 hour ago
Service Management Platform Engineer
Compeer Financial
Bloomington, IL · Lakeville, MN · Mankato, MN · Sun Prairie, WI · Prairie du Sac, WI
…enterprise service management platform and related workflow, automation, integration, reporting, and configuration-data capabilities. Independently translates service-management and…
Added 1 hour ago
Principal Infrastructure Engineer- Network
Compeer Financial
Bloomington, IL · Lakeville, MN · Mankato, MN · Sun Prairie, WI
Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field.
Added 1 hour ago
Manager, Substation and SCADA Engineering (Technical Services Manager)
Georgia System Operations Corporation
Monroe, GA
…experience in relays, apparatus, substation, SCADA, system operations, or similar technical roles into technical leadership. Working knowledge of protection and coordination is required.…
Added 1 hour ago
O
Senior Core Infrastructure Engineer
Oracle
Nashville, TN
- $79,200 to $209,500 USD / year
You will be responsible for ensuring that our cloud infrastructure solutions are designed and built with the highest level of scalability in mind. You will partner with other development…
Added 1 hour ago
Enterprise Account Executive
Observe.AI
Remote, United States
Experience selling AI/ML, automation, workflow, infrastructure, security, or contact center technology (CCaaS, workforce, or quality management). Agentic AI experience is a strong plus.
Added 1 hour ago
Network Automation Engineer
Quantum Sky
Chantilly, VA
Quantum Sky is searching for a Network Automation Engineer to support an Intel customer in Chantilly, VA. If you enjoy working with new technologies, enterprise-leading equipment, and…
Added 1 hour ago
Test & Validation Integration Engineer
Quantum Sky
Chantilly, VA
Quantum Sky is searching for a Test & Validation Integration Engineer to support an Intel customer in Chantilly, VA The Test & Validation Integration Engineer serves as the critical bridge…
Added 1 hour ago
Integration Support Engineer
Quantum Sky
Chantilly, VA
Quantum Sky is searching for an Integration Support Engineer to support an Intel customer in Chantilly, VA The Deployment & Field Support professional supports Customer Mission Operations…
Added 1 hour ago
S
AI & Innovation Lead, G&A
Sanity
Remote, United States
- $165,000 to $180,000 USD / year
…Systems Engineering. This role sits at the intersection of G&A operations, data, workflow automation, and AI. You bring the domain depth: you know how G&A teams actually work, where their…
Added 1 hour ago
Principal Tech Ops Engineer, AWS Rack Manufacturing
Amazon Data Services, Inc.
Salt Lake City, UT
We are seeking a Principal Tech Operations Engineer to lead and scale regional manufacturing operations across a complex, multi vendor hardware production ecosystem. This role owns the end…
Added 1 hour ago
Software Test & Automation Engineer II
Quantum Space
Rockville, MD · 801 Thompson Ave. Suite 201 Rockville, MD
We are seeking a skilled and motivated Software Test & Automation Engineer II to develop and maintain automated testing solutions that ensure the reliability, functionality, and performance…
Added 1 hour ago
Sr. AI Engineer
CalPrivate Bank
San Diego, CA · Brea, CA · El Segundo, CA · Newport Beach, CA
The Role: Sr. AI Engineer- Data Analytics & Artificial Intelligence
Added 1 hour ago
E
Senior Data Analyst
Envoy
San Francisco, CA
- $162,500 to $176,250 USD / year
…the world trust Envoy to run secure, compliant, and connected operations across every…
Added 1 hour ago
Energy Management and Control Services, Inc. - Construction Technician
Energy Management and Control Services, Inc.
Cranston, RI
…Services team and are responsible for the startup of building automation systems at sites throughout Massachusetts and Rhode Island. Our customer sites range from simple office buildings to…
Added 1 hour ago
EP
Identity and Access Management Engineer [Hybrid or Remote]
EDF power solutions
CA-San Diego US-Any City · San Diego, CA · Any City
- $107,200 to $178,600 USD / year
This role is integral to the day-to-day management of the IAM infrastructure and identity lifecycle from onboarding to offboarding. The IAM Engineer defines the identity strategy, hands-on…
Added 1 hour ago
OT Network Engineer, Mission Systems
SpaceX
Memphis, TN
SpaceX is looking for an exceptional network engineer with experience in mission-critical and large-scale production environments to support high-cadence launch operations as well as…

Lantern

Principal IAM Engineer

Remote, United States

Remote

Apply About employer

Applications open in a new tab.

Job details

Workplace: Remote
Posting language: English
Posted: Oct 30, 2026

Original job description

About Lantern

Lantern is the specialty care platform connecting people with the best care when they need it most. By curating a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more, Lantern delivers excellent care with significant cost savings to employers and their workforces. Lantern also pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey, helping them get back to good health, back to their families and back to work. With convenient access to specialists nationwide, Lantern means quality care is within driving distance for most. Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country. Learn more about us at lanterncare.com.

Lantern is the specialty care platform, connecting people with high-quality, affordable specialty care close to home. We operate in a regulated healthcare environment (HIPAA, HITRUST, SOC 2), we handle protected health information at scale, and we are becoming an AI healthcare company, with AI adoption a top company priority.

This Principal IAM Engineer is a senior level, individual-contributor role and the technical authority for identity at Lantern. In an organization where the security perimeter is effectively identity, you will own the identity control plane end to end, and you will determine who can reach PHI and under what conditions. You will set the identity standard, build the automation behind it, and hold the verification bar that other teams operate against.

You will report to the CISO and partner closely with our IAM engineer and with the platform, cloud, and service delivery teams that execute alongside you. This is a hands-on principal seat, not a people-management role today, with a clear path to expand into a leadership role as the identity function grows.

Our security philosophy is open by default, secure by design. Security exists to help the business move fast, safely, and the default answer is “yes, safely,” because guardrails are built into the platform, pipelines, and tooling rather than enforced by someone saying no. Gates exist only where risk genuinely warrants them, and even then they are automated, fast, and transparent.

Location: Remote

Responsibilities:

Own the identity lifecycle: joiner, mover, and leaver provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC), with deprovisioning verified against an entitlement inventory rather than assumed.
Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default, just-in-time (JIT) elevation, and enforcement confirmed on every access path rather than only saved.
Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2.
Own secrets and non-human identity, including API keys, service accounts, and workload identity, and maintain an owner registry for them.
Own key access governance and separation of duties in a model where another team operates the key management system.
Own identity automation and identity-as-code, building lifecycle and access controls as reviewable, version-controlled infrastructure (Terraform and policy-as-code) rather than manual configuration.
Own the identity-verification standard the service desk follows for password resets, MFA resets, and device enrollment. This is a hands-on control point, because helpdesk-initiated resets are a leading account-takeover vector.

Key Deliverables in Your First Year:

Conditional Access enforced by default on PHI-facing applications, with enforcement verified.
Automated joiner, mover, and leaver provisioning and deprovisioning that meets its SLA every time.
A secrets golden path, with vaulted secrets, none in code, and a populated key-to-owner registry.
Strong, phishing-resistant MFA coverage on privileged accounts.
Documented runbooks and depth across the control plane, so no critical control depends on a single person.

How You Will Work:

You will set standards that partner teams execute. Service Delivery performs provisioning tasks and resets against the verification bar you own. Cloud Engineering carries cloud access, workload identity, and key-management operations, with key access governed by you. HR events are the sole trigger for lifecycle changes. The Governance, Risk & Compliance team independently attests to the entitlements you produce, and access certification deliberately sits outside this role so that the team reviewing access is not the team granting it. Holding those boundaries cleanly is central to the job.

Requirements:

Eight or more years in identity and access management, including principal- or staff-level ownership of an identity control plane.
Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2, and verifying that enforcement takes effect across every access path, not only the expected one.
Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory.
Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls.
Identity governance and administration (IGA) platform engineering, including privileged access management.
Automation and scripting (PowerShell, Python, or similar) to build lifecycle workflows and custom connectors.
Identity-as-code and policy-as-code practice, using Terraform with source-controlled change management (for example, GitHub).
Secrets and non-human identity (API keys, service accounts, workload identity), and maintaining an owner registry for them.
Key access governance and separation of duties in a model where another team operates the key management system.
The ability to act as the technical authority for a function without formal people-management authority, working directly to a CISO.
Bachelor’s degree in a relevant field, or equivalent professional experience.

Strong Candidates Will:

Healthcare or another regulated environment where identity controls gate access to PHI.
Hands-on Saviynt with PAM, Azure PIM, and Keeper, or transferable depth in comparable platforms.
Experience remediating a Conditional Access enforcement gap or a deprovisioning failure, and making the structural change that prevented recurrence.
Passkeys and FIDO2, or phishing-resistant authenticator experience, aligned with NIST SP 800-63 Rev. 4.
Experience growing a technical scope into a broader leadership remit.
Microsoft Identity and Access Administrator certification, CIMP, or equivalent.

Who Thrives in This Role:

Verified enforcement. You do not consider a control done until you have seen it working on every path.
Automation bias. You remove the manual step rather than documenting it more carefully.
Structural fixes. You solve the class of failure, not the instance.
Boundary clarity. You hold the standard with partner teams without taking over their execution.
Governance respect. You keep access certification independent rather than absorbing it.

Benefits

Medical Insurance
Dental Insurance
Vision Insurance
Short & Long Term Disability
Life Insurance
401k with company match
Flexible Time Off
Paid Parental Leave

About You:

You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins.
INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with.
You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas.
You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren’t just the individuals using your product. They are the driving factor in your motivation to make a change.
Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear.
You thrive in a Team Environment. Collaboration is key in innovation and creating change.

These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources, and support they need to get back to life.

If this sounds like you, we would love to connect to speak further about career opportunities at Lantern.

Please apply to our role & someone from our Talent Acquisition Team will reach out to help you navigate our interview process.

Lantern does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Apply About employer

Report this job