Senior Engineer, IT & Information Security Automation

Who We Are:

SmithRx is a rapidly growing, venture-backed Health-Tech company.  Our mission is to disrupt the expensive and inefficient Pharmacy Benefit Management (PBM) sector by building a next-generation drug acquisition platform driven by cutting edge technology, innovative cost saving tools, and best-in-class customer service.  With hundreds of thousands of members onboarded since 2016, SmithRx has a solution that is resonating with clients all across the country.

We pride ourselves for our mission-driven and collaborative culture that inspires our employees to do their best work. We believe that the U.S healthcare system is in need of transformation, and we come to work each day dedicated to making that change a reality. At our core, we are guided by our company values:

• Integrity: Our purpose guides our actions and gives us confidence in the path ahead. With unwavering honesty and dependability, we embrace the pressure of challenging the old and exemplify ethical leadership to create the new.
• Courage: We face continuous challenges with grit and resilience. We embrace the discomfort of the unknown by balancing autonomy with empathy, and ownership with vulnerability. We boldly challenge the status quo to keep moving forward—always.
• Together: The success of SmithRx reflects the strength of our partnerships and the commitment of our team. Our shared values bind us together and make us one. When one falls, we all fall; when one rises, we all rise.

Job Summary:

We are seeking a Senior Engineer, IT & InfoSec Automation to act as a force multiplier for our technical teams. This is a "build-from-the-ground-up" opportunity to design and implement automations that connect our systems to create new capabilities.

Your primary focus is to eliminate manual toil. You will solve ambiguous, open-ended problems by building and maintaining automated workflows for everything from employee onboarding and access control to security incident response and vulnerability management. You are a true "DevSecOps" champion, and your work will directly improve our efficiency, compliance, and security posture.

What you will do:

• Architect & Build: Design, build, and maintain scalable, resilient automation workflows connecting our diverse SaaS and cloud ecosystems (e.g., Okta, Google Workspace, AWS, Jira, and various security tools).
• IT & Identity Automation: Own the automation of the entire employee lifecycle (onboarding, offboarding, role changes). You will ensure access is provisioned consistently, correctly, and with zero manual intervention.
• Security Orchestration (SOAR): Develop and maintain security playbooks to automate our incident response (IR) processes. This includes alert ingestion from our SIEM, data enrichment, and automated containment or remediation actions.
• Vulnerability Management Automation: Integrate our vulnerability scanners with asset inventories and ticketing systems. You will build the process that automatically identifies owners, creates remediation tickets, and tracks vulnerabilities to closure.
• Compliance Automation: Partner with our GRC/compliance teams to build automated checks and evidence-gathering processes for our security controls (e.g., HIPAA, SOC 2) using our GRC automation platforms.
• Mentorship & Leadership: Act as the team's subject matter expert on automation. You will mentor junior engineers, define technical best practices, and help level up the entire team's automation skills.

What you will bring to SmithRx:

• Experience: 8+ years in a senior-level engineering role such as Security Engineering, DevOps, SRE, or Systems Engineering.
• Education: Bachelor’s degree in Computer Science, Information Technology or a related field, or relevant work experience required in lieu of a degree.
• Core Skills:
  • Expert-level scripting: Deep proficiency in a language like Python for building complex scripts and interacting with APIs.
  • Identity & Access Management (IAM): Hands-on experience with an IdP like Okta, including lifecycle management, API usage, and advanced workflows.
  • Security Principles: Strong, practical knowledge of InfoSec domains, including incident response, vulnerability management, and access controls.
  • Cloud & Infrastructure: Familiarity with public cloud environments (AWS) and Infrastructure as Code (Terraform).
• Senior-Level Mindset:
  • You are an expert at ide