The Role
Lead design and administration of IAM systems (Okta, ConductorOne): integrate SaaS apps for SSO, implement provisioning/SCIM, enforce RBAC and time-based access, run user access reviews, automate workflows with Terraform, monitor/respond to IAM alerts, support onboarding/offboarding, and contribute to security operations, compliance, and audit readiness.
Summary Generated by Built In
Company Overview:
Role:
Key Responsibilities:
Qualifications/Skills:
To be a strong fit, you embody our Core Values:
Why You'll Love Working With Us:
Function Health is the AI operating system for health, designed to empower people to live 100 healthy years. We are redefining how individuals understand, measure, and improve their health by moving beyond the limitations of traditional care and enabling comprehensive, continuous insight into human biology. Function has been recognized as one of Fast Company’s Most Innovative Companies of 2024, and is venture-backed by Redpoint and other leading venture firms. Over half a million members have joined Function to take control of their health.
Through comprehensive lab testing, MRI and CT imaging, longitudinal data, and guidance from AI and clinical teams, Function gives members a complete and continuous view of their health — and the clarity to act on it. Through acquisitions across imaging, mobile phlebotomy, and supplement tracking and optimization, Function is building an integrated health platform that spans the full path from testing to health clarity to daily action.
Function recently announced a $298M Series B and is entering its next chapter of growth. As we scale, the quality and durability of our People systems, data, and insights will directly shape our ability to attract, retain, and support exceptional talent.
We are growing our team and seeking out world-class talent that deeply believes in our mission to positively impact global health, has a relentless bias toward action, and a growth mindset. Function fosters a collaborative and dynamic environment where every day we build the future.
Role:
We’re looking for a pragmatic Security Engineer with a strong focus on Identity and Access Management (IAM) to join our lean, fast-paced Security Operations team. In this hands-on role, you will lead the design and management of critical IAM systems protecting our clients’ health data—the foundation of our business. With nearly 1 million users and growing rapidly, you will be leading efforts for Okta and ConductorOne, responsible for application integrations, enabling provisioning, building out our Okta organizational structure, and enforcing security policies around user access.
Beyond IAM, there’s room to expand into security operations, IT automation, and compliance as our team grows. This is a unique opportunity to own one of the strongest security controls in the company and directly reduce organizational risk at scale.
Key Responsibilities:
- Administer and optimize Okta, including:
- Integrating new applications for SSO
- Implementing and enhancing provisioning and revocation workflows
- Building and maintaining Okta organizational structure and role mappings
- Administer ConductorOne to:
- Integrate it with all relevant applications
- Conduct User Access Reviews (UARs)
- Enforce time-based access controls
- Enable and improve automated provisioning and revocation
- Collaborate with cross-functional teams to ensure secure onboarding/offboarding and least privilege enforcement
- Support ongoing IAM policy development, documentation, and audit readiness
- Monitor and respond to IAM-related alerts and incidents, escalating as needed
- Identify opportunities to automate IAM workflows and enhance security operations
- Participate in broader security initiatives including vulnerability management, IT automation, and compliance support
Qualifications/Skills:
- 3–5 years of hands-on experience administering IAM platforms, ideally Okta and/or ConductorOne
- Strong knowledge of SSO protocols (SAML, OIDC), provisioning standards (SCIM), and IAM best practices
- Experience integrating multiple SaaS applications into centralized IAM systems
- Familiarity with user lifecycle management, role-based access control (RBAC), and access review processes
- Solid understanding of cloud infrastructure identity models (GCP preferred) and security operations fundamentals
- Experience using Terraform for infrastructure as code, particularly for managing IAM resources and integrations
- Comfortable working independently in a fast-moving environment with minimal supervision
- Strong organizational skills and a detail-oriented mindset
Your dedication to these responsibilities will directly contribute to the success of our platform and the satisfaction of our users. We are looking for a proactive, skilled, and forward-thinking individual to join our team and help shape the future of our services.
To be a strong fit, you embody our Core Values:
- Ruthless Prioritization:
- We don’t let perfect get in the way of progress.
- We move quickly to drive value, not perfection.
- We prioritize what drives impact.
- We never compromise on standards of excellence.
- Member-First, Always:
- We design and deliver like we’re caring for someone we love.
- We create calendar, actionable, human experience.
- We prioritize responsiveness, peace of mind, and outcomes.
- We empower members with truth, clarity, and care.
- One Team, Moving Fast:
- We are aligned in purpose, prioritization, and speed.
- We gather diverse perspectives to make informed decisions.
- We clear paths for each other and move fast together.
- We communicate clearly and respectfully, rallying around shared goals.
- Radical Ownership, Relentless Execution:
- We don’t just ship– we own outcomes and drive results.
- We act with urgency and precision
- We anticipate, initiate, and follow through.
- We meet challenges with grit and pragmatism.
- We embrace new tech to deliver better outcomes.
- Mission Over Ego:
- We are ruthlessly aligned to our mission - and leave ego at the door.
- We disagree and commit.
- We don't tolerate politics or withholding information.
- We operate with honesty, transparency, and respect.
- Sustained Integrity in Every Detail:
- We earn trust by obsessing over accuracy, quality, and clarity in everything we do.
- We prioritize clinical precision - data must be right.
- We sweat the details because outcomes depend on them.
Why You'll Love Working With Us:
We value our team at Function and offer a competitive salary and benefits package, flexible working hours, and a dynamic work environment where creativity and innovation are encouraged. If you are a highly motivated and experienced individual who is passionate about using technology to improve people’s lives, we would love to hear from you.
At Function, we celebrate diversity and are committed to building a diverse and inclusive workforce. As an equal opportunity employer, we do not discriminate on the basis of race, color, gender identity, ancestry, religion, age, sexual orientation, national origin, disability, marital status, Veteran status, or any other occupationally irrelevant criteria.
Join the Function Health team and become a part of our mission to build a healthier future for all. Discover more about us and how we're changing the face of healthcare at Function Health.
Important Notice: Legitimate communication from the Function Health team will always come from an email address ending in @functionhealth.com. Function Health will never request personal information such as banking details or payment during the hiring process. Please be cautious of communications or job offers that come from other email domains, instant messaging platforms, or unsolicited calls. If you ever have doubts about the legitimacy of a communication, please reach out to us directly at [email protected].
Skills Required
- 3-5 years administering IAM platforms, ideally Okta and/or ConductorOne
- Strong knowledge of SSO protocols (SAML, OIDC) and provisioning standards (SCIM)
- Experience integrating multiple SaaS applications into centralized IAM systems
- Familiarity with user lifecycle management, role-based access control (RBAC), and access review processes
- Understanding of cloud infrastructure identity models
- Experience with GCP (preferred)
- Experience using Terraform for infrastructure as code to manage IAM resources and integrations
- Security operations fundamentals
- Ability to work independently in a fast-moving environment
- Strong organizational skills and a detail-oriented mindset
Function Health Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Function Health and has not been reviewed or approved by Function Health.
-
Retirement Support — Pay packages are described alongside a competitive 401(k) match program, which can strengthen overall total-rewards value. This adds a longer-term financial benefit beyond cash compensation.
-
Healthcare Strength — Comprehensive health insurance options for employees and families are described as part of the benefits package. That breadth can materially increase perceived compensation value, especially for dependents.
-
Leave & Time Off Breadth — An open time-off policy plus a set of company holidays is described as part of the offering. This can improve the overall rewards experience even when cash pay varies by role.
Function Health Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
One mission—empowering you to live 100 healthy years. Starting with 100+ lab tests and insights from medical experts in heart, hormones, cancer, and more
