Back to jobs
New

SSO Technical Lead

US

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 85 health plans, including many of the top 20, and representing more than 270 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We’re constantly reimagining what’s possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.

About the Opportunity

Machinify is modernizing its enterprise systems landscape, and single sign-on (SSO) is at the core of our security and user experience strategy. We are looking for an SSO Technical Lead to drive the design, implementation, and enablement of SSO across all enterprise applications from HR and Finance to Sales and Operations.

This is a hands-on technical leadership role that requires strong problem-solving skills, cross-functional collaboration, and the ability to quickly learn and integrate new technologies. You will work closely with business system owners, IT security, and external partners to ensure consistent, secure, and seamless authentication experiences across the company, while aligning with NIST cybersecurity standards, layered defense principles, and least privilege access models.

What You'll Do

  • Lead the end-to-end implementation of SSO for all enterprise applications — including HR, Order Management, Operations, Sales, Service, Legal, and Procurement systems.
  • Design and configure identity integrations using Entra ID (Azure AD), Okta, or similar identity providers to enable SAML, OIDC, and OAuth-based authentication.
  • Implement layered security controls that align with the NIST and HITRUST particularly regarding protection of PHI ( Protected Health Information) and personally identifiable data.
  • Apply least privilege access principles across all SSO-enabled applications to ensure users and service accounts have the minimal required access for their roles.
  • Partner cross-functionally with system owners, InfoSec, and application teams to assess requirements, plan integrations, and execute go-live with secure authentication flows.
  • Standardize and document SSO integration patterns, metadata exchange, and token policies to ensure scalability, consistency, and auditability.
  • Collaborate with InfoSec to enforce MFA, conditional access, and continuous monitoring for privileged and non-privileged accounts.
  • Maintain and enhance existing SSO configurations, certificates, and policies to support business continuity and compliance with company security policies.
  • Evaluate and onboard new SaaS applications, ensuring that each integration adheres to layered security and least privilege principles.
  • Troubleshoot and resolve SSO integration issues across multiple identity providers and environments with a focus on security and operational resilience.
  • Provide mentorship and knowledge sharing within the IT Applications and Security teams on identity, access management, and cybersecurity best practices.

What You Bring

Required Skills & Experience

  • Bachelor’s degree in Computer Science, Information Systems, or related field.
  • 5+ years of experience in IT Applications, Identity Management, or System Integration roles.
  • Proven experience implementing SSO using Microsoft Entra ID (Azure AD), Okta, Ping, or equivalent.
  • Strong understanding of SAML 2.0, OAuth 2.0, OIDC, and SCIM standards.
  • Experience integrating SSO with SaaS and on-premise applications (e.g., Workday, Paycom, Salesforce, SAP, Oracle, ServiceNow, Coupa, DocuSign).
  • Practical knowledge of the NIST Cybersecurity Framework, and  HITRUST particularly as it applies to authentication, identity, and access control.
  • Solid understanding of layered security architecture implementing defense-in-depth controls across network, application, and identity layers.
  • Demonstrated experience enforcing least privilege access, role-based permissions, and segregation of duties.
  • Strong troubleshooting skills in authentication flows, certificates, and federation services.
  • Ability to balance hands-on technical work with stakeholder communication, project management, and documentation.
  • Proven ability to work cross-functionally and influence teams in a fast-paced environment.

Preferred Skills

  • Familiarity with identity governance and administration (IGA) frameworks and lifecycle automation.
  • Exposure to API-based integrations, automation scripts (PowerShell, Python), or workflow orchestration tools.
  • Experience in a high-tech or SaaS environment supporting enterprise business systems.
  • Security certifications (CISSP, CISM, or Microsoft Identity and Access certifications) are a plus.

What We Offer

  • Work from anywhere in the US! Machinify is digital-first.
  • Top Medical/Dental/Vision offerings
  • FSA/HSA
  • Tuition reimbursement
  • Competitive salary, 401(k) with company match
  • Unlimited PTO 
  • Additional health and wellness benefits and perks
  • Flexible and trusting environment where you’ll feel empowered to do your best work 
Equal Employment Opportunity at Machinify
 
We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. Machinify is an employment at will employer. We participate in E-Verify as required by applicable law. In accordance with applicable state laws, we do not inquire about salary history during the recruitment process. If you require a reasonable accommodation to complete any part of the application or recruitment process, please let our recruiters know. See our Candidate Privacy Notice at: https://www.machinify.com/candidate-privacy-notice/

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Share any relevant links you'd like us to review here, such as your GitHub, personal website, online portfolio, or other professional profiles.

Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Machinify’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.