Staff Security Engineer - IAM
The Staff Security Engineer will be responsible for designing, implementing, and maintaining security identity services that support our business. You will understand data and automation are important ingredients to our mission and know how to actively employ these ingredients at scale. Beyond the technical expertise, we value individuals who can partner cross-functionally across various teams, driving impactful outcomes and further securing our digital landscape.
\n-
Lead the development, implementation, and ongoing maintenance of comprehensive security strategies and solutions.
-
Design and deploy advanced identity security controls to safeguards networks, systems, and applications.
-
Work across disciplines to shape our security services strategy and execution
-
Set and uphold the standard for security processes to support high-quality engineering
-
Mentor and galvanize new engineers to do their best work
-
BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field
-
8+ years of experience in software or security engineering within Cloud Native environments
Domain Specific Minimum Requirements
-
Cloud IAM Architecture: Deep knowledge of cloud security architectures (AWS IAM, Azure Entra ID, or GCP IAM), including designing/enforcing least-privilege roles, RBAC/ABAC, and permission policies.
-
Identity Protocols & Governance: Proficiency in identity standards and federation protocols (SAML, OIDC, OAuth, LDAP/Directory Services), user lifecycle automation, SSO, MFA, and Just-In-Time (JIT) access.
-
Automation & IaC: Strong hands-on proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting (Python or PowerShell) to automate identity provisioning, drift detection, and access workflows.
-
Non-Human Identity (NHI) Fundamentals: Practical experience managing service accounts, API keys, bots, and automated workload identities across cloud infrastructure.
-
Experience architecting, developing, and deploying large-scale distributed systems at scale
-
Experience with cloud technologies, e.g., AWS, Azure, GCP
-
Experience building continuous integration and continuous development (CI/CD) pipelines
-
Familiarity with server-side web technologies (eg: Java, Python, Scala, C#, C++, Go)
-
4+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long-term business value
-
Experience with health-tech systems, like Electronic Health Records, Clinical data, etc.
Domain Specific Experience
-
AI Identity & Access Management
-
NHI Architecture: Design secure, scalable, and automated solutions for managing service accounts, machine identities, secrets, certificates, APIs, and cloud-native workloads.
-
AI/ML Security & Threat Modeling: Hands-on experience with AI/ML tools (e.g., Gemini, Claude, AWS Bedrock), conducting threat modeling for AI systems, or managing automated permission guardrails for AI agents.
-
AI/ML Security & Threat Modeling: Hands-on experience with AI/ML tools (e.g., Gemini, Claude, AWS Bedrock), conducting threat modeling for AI systems, or managing automated permission guardrails for AI agents.
-
Advanced Protocols & Microservice Security: Familiarity with SPIFFE/SPIRE, zero-trust network architectures, or complex containerized identity frameworks.
-
SIEM & Security Observability Tools: Experience orchestrating VPC flow logs and audit feeds into security analytics tools (e.g., Crowdstrike, Sumo Logic, Wiz, Zscaler).
-
Industry & Regulatory Context: Experience with health-tech systems, clinical data environments (EHRs), and regulatory standards (HIPAA, SOC 2, ISO 27001).
-
Certifications: CISSP, OSCP, CEH, Certified AI Security Specialist (CAISS), or GIAC Machine Learning Security Engineer (GMSE).
-
Who We Are:
Aledade PBC, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place.
What Does This Mean for You?
At Aledade PBC, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission.
In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members:
Flexible work schedules and the ability to work remotely are available for many roles
Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
Robust time-off plan (21 days of PTO in your first year)
Two paid volunteer days and 11 paid holidays
12 weeks paid parental leave for all new parents
Six weeks paid sabbatical after six years of service
Educational Assistant Program and Clinical Employee Reimbursement Program
401(k) with up to 4% match
Stock options
And much more!
At Aledade PBC, we don’t just accept differences, we celebrate them! We strive to attract, develop and retain highly qualified individuals representing the diverse communities where we live and work. Aledade is committed to creating a diverse environment and is proud to be an equal opportunity employer. Employment policies and decisions at Aledade are based on merit, qualifications, performance and business needs. All qualified candidates will receive consideration for employment without regard to age, race, color, national origin, gender (including pregnancy, childbirth or medical conditions related to pregnancy or childbirth), gender identity or expression, religion, physical or mental disability, medical condition, legally protected genetic information, marital status, veteran status, or sexual orientation.
By applying for this job, you agree to Aledade's Applicant Privacy Policy available at https://www.aledade.com/privacy-policy-applicants
Telephony Integration Administrator
The Telephony Solutions Administrator is responsible for driving the design, implementation, and support of Aledade's telephony, integration, and AI solutions. This role will lead API development, system integrations, telephony engineering, and security coordination to ensure the delivery of secure, scalable, and dependable systems. Additionally, this role is critical in modernizing contact center operations through automation, AI initiatives, and platform upgrades, while maintaining the performance and reliability of the Five9 platform and supporting telephony infrastructure.
\nArchitecture & Design
-
Design, develop, and maintain REST API integrations, automation, and system connectivity between Five9, AI solutions, internal applications
-
Lead technical implementation of telephony and AI initiatives, including platform migrations, workflow automation, and enterprise contact center enhancements
-
Design, configure, and optimize Five9 solutions, including dialer campaigns, call routing, IVRs, queues, skills, and workflow automation
-
Develop, test, and deploy APIs, integrations, telephony enhancements, and production changes while ensuring operational readiness and system stability
Vendor & Stakeholder Management
-
Partner with Information Security, Compliance, IT, and business stakeholders to support security reviews, SOX controls, risk assessments, vendor onboarding, and implementation of technical requirements
-
Manage technical relationships with telephony, carrier, AI, and integration vendors to support implementations, issue resolution, platform enhancements, and ongoing system performance
Optimization & Support
-
Support SIP trunk configurations, carrier connectivity, telephony infrastructure, and related platform engineering activities
-
Monitor, troubleshoot, and resolve platform, integration, and telephony issues while coordinating with internal teams and external vendors
-
Create and maintain technical documentation for system architecture, APIs, integrations, telephony configurations, and operational procedures
-
Research, evaluate, and recommend emerging AI, telephony, automation, and contact center technologies that improve operational efficiency and scalability
Other duties as assigned
-
Bachelor’s Degree or equivalent experience
-
4+ years of experience supporting contact center technology, systems engineering, telephony platforms, or enterprise technology solutions.
-
Experience administering Five9 or another enterprise CCaaS platform, including ability to think strategically and architect how the telephony CCaaS system and its features will integrate and function within the organization’s broader technology ecosystem.
-
Automation familiarity with low-code automation tools or basic scripting (JavaScript/Python) to interact with REST APIs.
-
Skilled at navigating security reviews, using Jira to document workflows, and integrating various systems and tools that operate on the telephony platform.
-
Experience supporting enterprise technology implementations, platform migrations, or technical projects.
-
Experience partnering with Information Security and Compliance teams to support security reviews, SOX controls, vendor assessments, or technical compliance requirements.
-
Working knowledge of SIP trunking, telephony infrastructure, and carrier connectivity.
-
Proven ability to analyze and synthesize data to develop sound conclusions.
-
Ability to communicate technical concepts effectively with both technical and business stakeholders.
-
Ability to understand current workflows and processes and how these can be impacted by larger system changes, application updates, or enhancements.
-
Highly motivated mindset to explore, test, and implement new technology
-
Experience implementing AI or automation solutions within a contact center
-
Experience with Five9 APIs, SDKs, and developer tools.
-
Experience supporting healthcare or other regulated environments
-
Working knowledge of SQL, JavaScript, Python, PowerShell, or similar scripting languages.
-
Prolonged periods of sitting at a desk and working on a computer.
Who We Are:
Aledade PBC, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place.
What Does This Mean for You?
At Aledade PBC, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission.
In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members:
Flexible work schedules and the ability to work remotely are available for many roles
Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
Robust time-off plan (21 days of PTO in your first year)
Two paid volunteer days and 11 paid holidays
12 weeks paid parental leave for all new parents
Six weeks paid sabbatical after six years of service
Educational Assistant Program and Clinical Employee Reimbursement Program
401(k) with up to 4% match
Stock options
And much more!
At Aledade PBC, we don’t just accept differences, we celebrate them! We strive to attract, develop and retain highly qualified individuals representing the diverse communities where we live and work. Aledade is committed to creating a diverse environment and is proud to be an equal opportunity employer. Employment policies and decisions at Aledade are based on merit, qualifications, performance and business needs. All qualified candidates will receive consideration for employment without regard to age, race, color, national origin, gender (including pregnancy, childbirth or medical conditions related to pregnancy or childbirth), gender identity or expression, religion, physical or mental disability, medical condition, legally protected genetic information, marital status, veteran status, or sexual orientation.
By applying for this job, you agree to Aledade's Applicant Privacy Policy available at https://www.aledade.com/privacy-policy-applicants
Senior Software Engineer II - Ingestion AI Engineer
Senior Software Engineer I- Data & Insights Engineering
Senior Security Engineer II - DSPM
Senior Software Engineer I - AI/ML
As a Senior Software Engineer I at Aledade, we maintain, improve, and expand our web application and data pipelines. We're looking for engineers who know that writing new code is not always the solution to a problem, but when technological changes are needed they create secure, maintainable, performant, correct, scalable, and stable solutions to the complex and unique challenges in our corner of the healthcare industry.
They embrace strategies that minimize risk, leaning towards observability, alerting, metrics, high test coverage, and frequent releases that incrementally build value.
\n- Develop and implement scalable and performant solutions.
- Partner, as a peer, with Engineering Managers, Product Managers, and stakeholders throughout Aledade to develop and execute technical roadmaps using Agile processes.
- Mentor and coach more junior engineers including thorough pull request reviews for other developers and be receptive to critical feedback on your own work.
- BS/BTech (or higher) in Computer Science, Engineering or a related field.
- 4+ years experience as an engineer building full-stack web applications as part of a cross-functional team.
- 3+ years of experience working with SQL or other database querying language on large multi-table data sets.
- 2+ years of experience acting as a trusted technical decision-maker in a team setting, solving for short-term and long-term business value.
- 2+ years of experience coaching other engineers.
- Improve AI/ML infrastructure for model development, training, and deployment, with a focus on large language models and other generative AI architectures.
- Design multi-year vision, shaping the direction of crucial generative AI areas - text generation, image synthesis, multimodal models, and personalized content creation.
- Architect systems to enhance the capabilities and relevance of AI models, making complex data sets more accessible and actionable.
- Design and implement prompt engineering strategies to effectively guide generative AI models.
- Work closely with Product Management, Practices, Sales, Customer Success, and other stakeholders to identify and prioritize applied AI use cases within the organization.
- Analyze product usage patterns and trends to make data-driven decisions and forecasts for generative AI applications.
- Maintain the security of protected patient health information and ensure compliance with relevant regulations in the context of AI.
- Contribute to the development of APIs and interfaces for integrating generative AI capabilities into existing healthcare systems and applications.
Senior Software Engineer II - (AI Core Platform)
Senior Software Engineer II- (Forward Deployed AI)
Senior Software Engineer I- (Forward Deployed AI)
Aledade's AI Enablement team enables, educates, and supports the Product, Tech, and Analytics (PTA) organization in adopting developer-centric AI tools (Claude Code, MCP, plugins, skills, hooks). The Forward-Deployed Engineer (FDE) embeds directly with a PTA cohort — Point of Care, Risk, Data, or another team — to unblock AI adoption on the ground: shipping plugins and skills tailored to that team's workflows, integrating their tools through the MCP Gateway, and turning hard-won lessons into reusable patterns for the broader platform. This is the role for engineers who think like internal consultants: meet teams where they are, build what they need today, and feed durable wins back into the marketplace and installer that the rest of Aledade depends on.
\n-
Embed with a PTA cohort and ship targeted enablement. Pair with engineers, PMs, and analysts on the assigned team; build plugins, skills, hooks, and connectors that solve their highest-friction workflows; measure adoption and impact.
-
Productize wins into the platform. Generalize cohort-specific work into reusable plugins, skill templates, and patterns published to the Claude Code Plugin Marketplace; document authorship guides; reduce the activation cost for the next cohort.
-
Integrate new tools through the MCP Gateway + AWS connector layer. Add and harden MCP server integrations (Glean, Slack, Jira, Snowflake, Salesforce, Databricks, etc.) to the gateway; partner with security and platform owners on auth/scopes/observability.
-
Feed back to the platform team and AI Unlock program. Contribute to roadmap and quarterly milestones; participate in office hours and brownbags as a practitioner; surface blockers (security, BAA, cost, throttling) early.
-
Support adoption health. Help close the long tail of repos with no .claude/ config; mentor cohort engineers on agentic-coding patterns; on-call rotation for marketplace-published artifacts.
-
BS/BTech (or higher) in Computer Science, Engineering or a related field.
-
3+ years professional software engineering experience
-
Production experience with at least one modern application stack (Python, TypeScript/Node, Go, or similar) and modern CI/CD.
-
Demonstrated ability to ship end-to-end in unfamiliar codebases — e.g., consulting, forward-deployed, solutions, or platform-adjacent backgrounds.
-
Direct hands-on experience with one or more agentic coding tools in a production or near-production setting (Claude Code, Cursor, Cody, Copilot agents, Aider, or equivalent).
-
Strong written communication: comfortable producing documentation, runbooks, and educational artifacts for engineers who weren't in the room.
-
Experience authoring or maintaining MCP (Model Context Protocol) servers, Claude Code plugins, skills, hooks, or comparable LLM-tooling integrations.
-
Background in healthcare technology, HIPAA-regulated environments, or PHI-handling systems.
-
Prior FDE / customer-facing engineering / solutions architect / TPM-with-IC-chops experience.
-
Familiarity with Aledade's stack (Python/FastAPI, Vue/TypeScript, Postgres, AWS, Auth0, Datadog, Sumo Logic) is a plus but not required.
-
Experience integrating tools through API gateways, OAuth/M2M flows, or service meshes.
-
Comfort across the full stack (frontend/backend/infra) — FDE work doesn't honor team boundaries.
Principal Engineer - AI Data and Infrastructure, Remote
The full posting opens here — pay, setting and the full description, without leaving the list.