Principal Security Engineer

The role

You will set the technical vision for protecting systems, data, and families. You will serve as a security advisor and partner with Engineering on DevSecOps strategy and architectural improvements.

What you will do

• Set the technical vision for the security stack
• Define long-term cloud and identity security strategy across Microsoft Azure/EntraID and AWS
• Lead security architecture review and threat modeling for Care Hub and connected services
• Define DevSecOps strategy and standardize security gates across the SDLC and CI/CD pipeline
• Serve as the senior technical escalation point including in the on-call rotation
• Monitor and advise on the evolving threat landscape facing healthcare
• Ensure the organization can demonstrate security posture to payors, regulators, and auditors
• Drive automated configuration checks and drift detection
• Shape the technical sequencing of the multi-year security roadmap
• Mentor the security engineering team

Required qualifications

• 10+ years of experience as a Security Engineer, Principal Security Engineer, Security Architect, or similar role(s)
• At least 5 years of experience within the healthcare industry
• A track record of setting security technical strategy and driving alignment across security, IT, and engineering teams
• Deep expertise in cloud and identity security architecture across AWS and Microsoft Azure/EntraID
• Hands-on application and product security experience, including threat modeling, secure SDLC and CI/CD design, and securing healthcare APIs (FHIR, SMART on FHIR)
• Experience leading detection and response programs
• Extensive experience translating HITRUST and HIPAA Security Rule requirements into technical controls
• Experience using Artificial Intelligence (AI) as a transformative technology to enhance and automate security processes
• Knowledge of IT systems such as AWS, Microsoft Intune, EntraID, CrowdStrike Falcon (EDR/SIEM), GitHub Advanced Security, Snowflake, JAMF, Meraki, and JIRA Service Management
• Strong collaboration and coaching skills
• Comfort operating autonomously in ambiguity
• Experience working in a fast-paced, hypergrowth, collaborative environment

Nice to have

• Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field
• advanced degree
• CISSP, CCSP, CISM, GIAC (e.g., GCIH, GCLD, GSEC), AWS Certified Security – Specialty, Microsoft Certified: Cybersecurity Architect Expert
• experience with Medplum
• Contributions to the broader security community, such as conference talks, publications, or industry threat intelligence sharing

Benefits

• Competitive medical, dental, and vision insurance
• Healthcare and Dependent Care FSA
• Company-funded HSA
• 401(k) with 4% match, vested 100% from day one
• Employer-paid short and long-term disability
• Life insurance at 1x annual salary
• 20 days PTO
• 10 Company Holidays
• 2 Floating Holidays
• Paid new parent leave

About the company

Imagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. They deliver 24/7 virtual first and in home medical, behavioral, and social care.