Tempus logo

IAM Engineer

Tempus

Redwood City, CAFull-time$100–145K/yrPosted 6 days agoStill listed 2 days ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$100–145K/yr
Location
Redwood City, CA
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

The IAM Engineer supports Tempus’ precision-medicine mission by helping secure and protect client and patient data. The role designs, deploys, and maintains identity and access management solutions, addresses security risks, and works with IT and business units to integrate IAM practices into operations. The position focuses on authentication and authorization across Tempus’ data-rich environments and workflows.

Skills & qualifications

RequiredNice to have

Skills

AuthenticationAuthorization (Computing)TerraformGithubSecurity Assertion Markup Language (SAML)OAuthLDAP AdminSimple Object Access Protocol (SOAP)RESTful APIISO/IEC 27001NIST 800Authentication and Authorization ProtocolsOktaOkta WorkflowsIAM Risk ManagementAuthentication and Authorization Best PracticesCommunicationCollaborationInterpersonal SkillsProject ManagementAnalytical SkillsProblem-SolvingIAM PrinciplesIAM FrameworksIAM TechnologiesSAML 2.0OAuth 2.0OpenID ConnectLDAPSOAPRESTSCIMInformation Security Risk ManagementCompliance PracticesISO 27001SOC 2 Type 2NIST 800-30

Qualifications

3+ Years IT Security Experience2+ Years IAM Engineering Experience

Benefits

Medical Insurance

Full job description

Passionate about precision medicine and advancing the healthcare industry?

Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

Are you passionate about making a difference in the world of cancer genomics? At Tempus, biological samples are processed in our in-house lab and turned into valuable genomic data. This data flows from on-site to an extensive cloud-based infrastructure and set of workflows that produce impactful insights. SaaS products are developed in-house by cross functional teams to share those insights with our clients.

Tempus’ approach to information security allows us to react to threats to any of the environments and workflows described above and identify and close gaps quickly. Our effective security operations engrained with comprehensive monitoring, testing, and risk management allow us to protect Tempus without reducing the speed at which we do business. You and your team set the security goals and design and deploy the products, controls, and workflows to ensure Tempus will continue to make a lasting impact in the field of cancer research and treatment.

As an IAM Engineer, you’ll play a critical role in fulfilling the mission of Tempus by helping ensure we provide secure and private precision medicine methodologies for our clients and their patients.

Responsibilities:

  • Practical experience with authentication and authorization protocols.
  • Proven experience in the design, implementation, and maintenance of comprehensive IAM solutions across various domains, including OKTA and OKTA Workflows.
  • Strong skills in identifying, assessing, and mitigating IAM-related security risks, proactively addressing potential threats and vulnerabilities.
  • Understanding of best practices surrounding authentication and authorization in a data rich environment.
  • Proven ability to collaborate with IT and other business units to promote IAM awareness and integrate IAM best practices into operational processes.

Requirements:

  • 3+ years of experience in IT Security and at least 2 years of experience with IAM Engineering
  • Must possess extensive experience with OKTA and OKTA Workflows.
  • Exceptional communication, collaboration, and interpersonal skills, with the ability to effectively translate complex technical security concepts into clear and concise language.
  • Excellent project management skills to oversee and drive IAM initiatives.
  • Strong analytical and problem-solving skills particularly focused on authentication and authorization issues.
  • Hands-on experience with Terraform and GitHub.
  • Strong understanding of IAM principles, frameworks, and technologies, including SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SOAP, REST, and SCIM.
  • Knowledge of information security risk management frameworks and compliance practices, including ISO 27001, SOC2 Type 2, and NIST 800-30.

About Tempus: Passionate about making a difference in the world of cancer genomics? We're on a mission to connect an entire ecosystem to redefine how genomic data is used in clinical settings. We're looking for software engineers who are passionate about changing the status quo and bringing cancer care into the 21st century.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status $100,000 - $145,000

The expected salary range above is applicable if the role is performed from California and may vary for other locations (Colorado, Illinois, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.

Additionally, for remote roles open to individuals in unincorporated Los Angeles – including remote roles- Tempus reasonably believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: engaging positively with customers and other employees; accessing confidential information, including intellectual property, trade secrets, and protected health information; and appropriately handling such information in accordance with legal and ethical standards. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

How this job compares

Set against the 4,187 open Security Engineer jobs on Olive Jobs, counted November 3, 2026.

Pay
  • This posting$100–145K/yr
  • California median$165–247K/yr644 salary ranges
  • US median$132–208K/yr3,409 salary ranges

This range's midpoint, $123K, is 41% below the California median midpoint ($206K) — in the lowest quarter of Security Engineer salary ranges in California.

Openings
Olive Jobs lists 784 open Security Engineer jobs in California and 4,187 across the US. 8% of them nationwide are listed as remote or flexible.
Hiring the most in California
Experience
This posting asks for at least 3 years of experience — less than three in four Security Engineer postings that state a minimum ask for (median 5 years, across 3,615 postings).
Education
1,313 of the 4,187 open Security Engineer jobs (31%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 3, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.