Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.
Passionate about precision medicine and advancing the healthcare industry?
Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.
- Job Posting TitleJob Posting TitleSenior Software Engineer II, Security
- Job Description SummaryJob Description SummaryThis position will:
Lead complex implementations for security engineering to ensure best-in-class customer identity management, authorization, and observability systems.
Improve existing security micro-services, custom frameworks, and tooling by addressing technical gaps and implementing emerging standards.
Collaborate cross-functionally to implement internal security standards across a micro-service architecture
Partner with product teams and stakeholders to balance project priorities, scope, and trade-offs.
Drive continuous improvements in engineering tooling, designs, and processes.
Configure and manage complex technical services tooling such as Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP. - Job DescriptionJob DescriptionAre you passionate about building great software products?At Tempus, software products are owned and developed by small, autonomous teams composed of developers, designers, scientists, and product managers. Our teams set the goals, build the software, deploy the code, and contribute to a growing software platform that will make a lasting impact in the fields of cancer research and precision medicine.Tempus builds software as nimble as our teams. Our modern tech stack - dynamic languages and the latest open source and cloud services - allows our teams to iterate rapidly and lead our industry in innovation. Our decentralized, microservice architecture and emphasis on loosely coupled architecture and automation allow us to deliver advanced solutions with confidence, and at scale.Why we’re looking for you:Generative AI is changing the way businesses operate, traditional IAM controls need to evolve. As the Sr. Software Engineer II for security engineering you will drive the complex implementation of Tempus’ security vision to ensure Tempus’ patients records and IP are safely utilized by the latest technologies.You have experience driving implementation of holistic solutions across a complex micro-service architecture. Working to build reusable components and ensuring they’re easily consumable by your colleagues on different teams.You've got several years of experience working on software development teams, and are confident in working independently and collaboratively on a critical system, ensuring uptime and reliability.You have experience developing and securing distributed, event-based systems at an interesting scale of transaction and/or data volumeYou've worked in fast-paced, agile environments and helped keep projects on track, troubleshoot roadblocks, write documentation, and coordinate cross-team collaboration.You collaborate well with diverse, talented teams while mentoring and learning from team members regardless of experience level.You have experience working with cloud infrastructure providers (Amazon Web Services, Google Cloud, etc), and related tools like Docker, Terraform, or Kubernetes. You’ve have familiarity with an identity management platform like Auth0, Okta, Microsoft Entra, or Ping Identity.You are confident in a variety of technical scenarios and can lead a complex implementation across an engineering organization.Bonus points for:Knowledge of identity standards like OAuth, SCIM, and SAML.Experience with TypeScript, JavaScript, Node.JS, or Python.Experience with OAuth 2.1 emerging agentic controls.Experience with Chronicle or other SIEMs.Experience with various authorization models, RBAC, ReBAC, ABAC and PBAC.Responsibilities for the position:Lead complex implementations for the security engineering team to ensure best in class customer identity management, authorization, and observability systems across the business.Improve the existing security micro-services, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.Work with a variety of teams cross-functionally to implement internal standards for security across a micro-service driven architecture.Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.Drive improvements in engineering tooling, designs, and processes and make the case for and driving improvements.Implement new technologies and ideas within the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.Own the configuration of complex technical services tooling such as Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP.
$140,000 - $160,000
The expected salary range above is applicable if the role is performed from California and may vary for other locations (Colorado, Illinois, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.
Additionally, for remote roles open to individuals in unincorporated Los Angeles – including remote roles- Tempus reasonably believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: engaging positively with customers and other employees; accessing confidential information, including intellectual property, trade secrets, and protected health information; and appropriately handling such information in accordance with legal and ethical standards. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Similar Jobs at Tempus AI
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Leads security engineering architecture and strategy, including IAM, SSO, authentication, authorization, observability, and distributed event-based systems. Drives build-versus-buy decisions, improves security microservices and tooling, establishes engineering standards, and secures agentic AI infrastructure. Collaborates cross-functionally on priorities and tradeoffs while mentoring engineers, documenting practices, evaluating technologies, and advancing security across a cloud-based microservice architecture.
Top Skills:
AbacAuth0AWSChronicleDockerGCPJavaScriptKubernetesMicroservicesMicrosoft EntraNode.jsOauthOauth 2.1OktaPbacPing IdentityPythonRbacRebacSAMLScimSIEMTerraformTypescript
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Secure applications, APIs, cloud services, and AI/LLM-enabled systems throughout the SDLC. Conduct threat modeling, architecture reviews, penetration tests, vulnerability triage, and remediation guidance. Integrate SAST, DAST, SCA, and secrets scanning into CI/CD pipelines; build secure automation and guardrails; support vulnerability disclosure; and coach developers on secure design and coding. The role protects sensitive clinical and genomic data while communicating security risks to engineering teams and leadership.
Top Skills:
AIAPIsAWSBurp SuiteCi/CdCloud-Hosted ServicesCryptographyDastDockerGCPGoHipaaHttp/SInfrastructure-As-CodeJavaScriptKubernetesLlmsMcpMitre AtlasNist Ai Risk Management FrameworkOauthOidcOwasp Top 10Owasp Top 10 For Llm ApplicationsPastaPythonRagSastSecrets ScanningSoftware Composition AnalysisStrideTcp/IpWeb Applications
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Executes go-to-market campaigns and commercial marketing for hereditary cancer testing and germline genetics products. Develops clinician- and patient-facing collateral, sales enablement materials, digital experiences, training support, event strategies, and KOL programs. Translates genomic science into clear clinical messaging while coordinating with Medical Affairs, Product, Sales, Genetic Counseling, legal, compliance, and regulatory teams.
Top Skills:
Ai-Driven Workflow ToolsCrm SystemsDigital AutomationNext-Generation Sequencing (Ngs)
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
