Staff Information Security Engineer - IntelliScript (Remote)

Requirements:

• 10+ years of relevant experience
• 5+ years of experience with Identity and Access Management (IAM)
• 5+ years of hands-on technical engineering experience
• Experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity
• Strong understanding of IAM protocols, including OAuth, SAML, OIDC, and LDAP
• Experience configuring IAM solutions for API, web, and web authentication use cases
• Experience building, supporting, and securing AWS cloud-based web infrastructure
• Strong understanding of cryptography, authentication, authorization, secrets management, data security, web technology stacks, and cloud security
• DevSecOps experience and relevant technical knowledge, such as Git, Docker, Windows, SIEM, AWS security products, and Terraform
• Knowledge of security best practices for web application development
• Experience with secure coding practices and security frameworks such as OWASP, NIST, and CIS
• Understanding of security threats and how to prevent and address them
• Working knowledge of software engineering and deployment practices, including CI/CD pipelines and SCM
• Ability to conduct application security assessments
• Demonstrates initiative, sound problem-solving, clear communication, collaboration, accountability, and commitment to professional development
• Continued education and/or advanced degrees are desirable
• Experience in environments subject to HITRUST, HIPAA, and/or PCI regulations is desirable
• Experience in SaaS, actuarial science, and/or the insurance industry is desirable

Responsibilities:

• Manage and improve Identity and Access Management programs
• Improve, monitor, and maintain the Information Security Program
• Carry out security initiatives relating to infrastructure, products, and data
• Contribute to security planning and recommend strategic improvements
• Work with application developers to strengthen product feature security
• Design and implement controls to protect applications and data
• Monitor and analyze security events and incidents, and respond to breaches and emerging threats
• Integrate security best practices throughout the software development lifecycle in collaboration with development teams
• Identify and prioritize vulnerabilities and develop mitigation strategies
• Prepare and train developers, and promote security awareness across the organization
• Assess, address, and report on threats and organizational preparedness
• Help maintain compliance with applicable industry standards

Technologies:

• API
• AWS
• Azure
• CI/CD
• Cloud
• Cryptography
• DevSecOps
• Docker
• Git
• IAM
• LDAP
• OWASP
• OAuth
• SAML
• Security
• Terraform
• Web
• Windows
• Support
• LESS

More

We are Milliman IntelliScript, a Milliman business unit of a few hundred specialists across actuarial science, information technology, and clinical practice. We build data-driven SaaS products for insurance, health IT, and life sciences clients. Our collaborative, entrepreneurial culture values innovation, excellence, customer service, balance, transparency, and giving everyone a voice. We offer competitive compensation and benefits, training, career development, learning and mentoring opportunities, and employee-led resource groups. This remote Staff Information Security Engineer role is part of our Information Security team and works closely with Platform Engineering and Software Development as we modernize and scale our security capabilities. The position may require travel to our annual All Team Meeting and occasionally to other meetings. The expected application deadline is January 31, 2027. Overall salary is $131,600–$249,780; ranges vary by location, with $151,340–$249,780 in specified higher-cost locations and $131,600–$217,200 elsewhere. We offer medical, dental, and vision coverage; an employee assistance program; a 401(k) match and profit sharing; discretionary bonuses; flexible spending accounts; paid time off and holidays; family-building benefits; paid parental leave for eligible employees; life and AD&D insurance; and short- and long-term disability coverage. We consider qualified applicants without regard to protected characteristics.

last updated 43 week of 2026