Staff Software Engineer, Security

Passionate about precision medicine and advancing the healthcare industry? Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time. Job Posting TitleJob Posting TitleStaff Software Engineer, Security Job Description SummaryJob Description SummaryThe Staff Software Engineer for Security Engineering will drive key architectural initiatives for Tempus' Security stack: Technical Leadership & Strategy: Set the technical vision for security engineering, leading build-versus-buy decisions, IAM evolution, and cross-functional engineering best practices to scale platform innovation. Enabling Core Identity & Authentication: Drive customer-facing systems like Single Sign-On (SSO) and modern identity standards (OAuth, SAML, SCIM) to secure access across a decentralized microservices architecture. Supporting Agentic AI Infrastructure: Architect and secure emerging agentic controls and distributed event-based systems to ensure patient records and intellectual property are safely utilized by generative AI technologies. Job DescriptionJob DescriptionAre you passionate about building great software products?At Tempus, software products are owned and developed by small, autonomous teams composed of developers, designers, scientists, and product managers. Our teams set the goals, build the software, deploy the code, and contribute to a growing software platform that will make a lasting impact in the fields of cancer research and precision medicine.Tempus builds software as nimble as our teams. Our modern tech stack - dynamic languages and the latest open source and cloud services - allows our teams to iterate rapidly and lead our industry in innovation. Our decentralized, microservice architecture and emphasis on loosely coupled architecture and automation allow us to deliver advanced solutions with confidence, and at scale.Why we’re looking for you:Generative AI is changing the way businesses operate, traditional IAM controls need to evolve. As the Staff Software Engineer for security engineering you will set the technical vision to ensure Tempus’ patients records and IP are safely utilized by the latest technologies.You have experience setting the technical vision and direction for a product area, advocating for proven design principles and technology choices. You know when to implement identity standards, and where they need to be innovated on.You've got several years of experience working on software development teams, and are confident leading technical analysis & design, evaluating tradeoffs, leading build and buy decisions from a technical perspective, and establishing best practices.You have experience developing and securing distributed, event-based systems at an interesting scale of transaction and/or data volumeYou've worked in fast-paced, agile environments and helped keep projects on track, troubleshoot roadblocks, write documentation, and coordinate cross-team collaboration.You collaborate well with diverse, talented teams while mentoring and learning from team members regardless of experience level.You have experience working with cloud infrastructure providers (Amazon Web Services, Google Cloud, etc), and related tools like Docker, Terraform, or Kubernetes. You’ve have familiarity with an identity management platform like Auth0, Okta, Microsoft Entra, or Ping Identity.You are a polyglot coder - you have experience with and are comfortable using a variety of programming languages and frameworks, and picking up new ones.Bonus points for:Deep knowledge of identity standards like OAuth, SCIM, and SAML.Experience with TypeScript, JavaScript, Node.JS, or Python.Experience with OAuth 2.1 emerging agentic controls.Experience with Chronicle or other SIEMs.Experience with various Authorization models, RBAC, ReBAC, ABAC, and PBAC and their implementation tradeoffs.Responsibilities for the position:Lead technical decisions for the security engineering team and implement best in class customer identity management, authorization, and observability systems across the business.Manage and improve the existing security micro-services, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.Work with a variety of teams cross-functionally to implement internal standards for security across a micro-service driven architecture.Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.Discover deficiencies in engineering tooling, designs, and processes and make the case for and driving improvements.Help level-up engineering practice across Tempus through documentation, mentorship, training, and engagement with engineers.Present new technologies and ideas to the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.Lead build/buy decisions in the security domain to improve the velocity of engineering, drive down costs, and ensure secure technical excellence. $160,000 - $220,000 The expected salary range above is applicable if the role is performed from California and may vary for other locations (Colorado, Illinois, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position. Additionally, for remote roles open to individuals in unincorporated Los Angeles – including remote roles- Tempus reasonably believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: engaging positively with customers and other employees; accessing confidential information, including intellectual property, trade secrets, and protected health information; and appropriately handling such information in accordance with legal and ethical standards. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Ambry Genetics Corporation is a CAP-accredited and CLIA-licensed molecular genetics laboratory based in Aliso Viejo, California. We are a genetics-based healthcare company that is dedicated to open scientific exchange so we can work together to understand and treat all human disease faster. At Ambry, everyone is welcome. A career at Ambry Genetics is a chance to be part of a dynamic company that aims to improve health by understanding the relationships between genetics and human disease. We earned our reputation as industry leaders by responsibly introducing cutting-edge genetic testing solutions and continually sharing what we learn with the global scientific community. At Ambry you will be learning, challenging yourself, and having fun while collaborating with teammates through the open exchange of ideas. Our outstanding benefits program includes medical, dental, vision, FSA, paid sick leave and generous paid time off (PTO) program. The Company reserves the right to make changes to the 401k plan from time to time. You can learn more about the benefits here. Ambry Genetics is an Equal Opportunity Employer (EOE) and we maintain a drug-free work environment. The Company believes in second chance employment. Qualified applicants with arrest or conviction history will be considered regardless of their arrest or conviction history, consistent with local laws such as Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. You do not need to disclose your criminal history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if the Company is concerned about conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction, provide mitigating evidence, or challenge the accuracy of the background report. For the purpose of the above job description, “Essential Functions” are “Material Job Duties”. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. All qualified applicants will receive consideration for employment without regard to race (and traits historically associated with race, including, but not limited to hair texture and protective hairstyles such as braids, locks, and twists), color, creed, religion, sex, sexual orientation, gender identity, gender expression (including transgender status), national origin, ancestry, age, marital status or protected veteran status and will not be discriminated against on the basis of disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances. If you have a disability or special need that requires accommodation, please contact us at careers@ambrygen.com Ambry does not accept unsolicited resumes from individual recruiters, third party recruiting agencies, outside recruiters or firms without an executed contract in place. We are not responsible for any fees related to resumes that are unsolicited or are received by Ambry. Such resumes will be deemed the sole property of Ambry and will be processed accordingly. To review Ambry’s Privacy Notice, click here: Ambry’s Privacy Notice To review the California privacy notice, click here: California Privacy Notice | Ambry Genetics