Job Opportunities API

Who We Are and Why Join Us At OnMed our purpose is simple but powerful...to improve the quality of life and sense of well-being in our communities by bringing access to healthcare to everyone, everywhere. Our path to everywhere has already begun, with our innovative CareStation, a small but mighty, Clinic-in-a-Box, bringing #healthcareaccess anywhere with an outlet to plug it in. Poised to become a key component in America’s public health infrastructure, the OnMed CareStation is the only tech-enabled, human-led, hybrid care solution that combines the comprehensive experience, trust and outcomes of a clinic,  with the rapid scalability of virtual care.   At OnMed, every role, everyday, is directly impacting the communities we serve. You’ll join a high-performing purpose-driven team, innovating to break down the barriers that keep people from the care they need.  This is not just a job...it's a movement to bring access to healthcare where and when people need it most. It’s healthcare that shows up.  Who You Are You are a hands-on, deeply technical Security Engineer who designs, builds, deploys, and operates security across cloud, application, network, and physical infrastructure— not from the sidelines, but with your hands on the tools. You are fluent in the Microsoft Azure and Entra ecosystem, you understand networking and firewall rules cold, and you are just as comfortable reviewing application code as you are tuning detections in an XDR/SIEM console and running an incident to ground. You stay current with emerging threats and technologies, you automate what should be automated, and you have enough compliance grounding to translate technical controls into evidence auditors trust. You thrive in a new, fast-paced, high-demand environment and take direct ownership of the security and resilience of the systems that protect our patients’ healthcare data. Role's Responsibilities Designing, building, deploying, and managing security controls hands-on across OnMed’s cloud, application, and network environments— owning the outcomes directly rather than overseeing them from a distance. Architecting and hardening the Microsoft Azure and M365/Entra environment—identity, network security groups, firewall rules, and encryption at-rest and in-transit— along with corporate and CareStation field-device endpoints. Operating and tuning the security stack day to day: XDR/MDR, SIEM, and SOC workflows—building and refining detections, triaging alerts, and working them hands-on. Leading incident response end to end: triage, containment, eradication, root cause analysis, and documentation. Designing, reviewing, and maintaining network and firewall architecture—segmentation, rule sets, VPN, and Zero Trust access for the remote workforce and field devices. Reviewing application code, integrations, and system designs (in-house and vendor-built) for security gaps, and partnering with engineering on remediation. Automating security operations and repetitive tasks through scripting where it strengthens detection, response, or hardening. Administering identity and access in Entra ID— quarterly access reviews, privileged account audits, and MFA/SSO enforcement. Maintaining control evidence for SOC 2, HITRUST, FedRAMP, HIPAA, and related frameworks, supporting auditor and assessor requests, and tracking findings through to remediation. Where a managed security services provider is used, directing and holding them accountable as an extension of the in-house team—while retaining direct ownership of security outcomes. Maintaining security policies, supporting security awareness training, and responding to customer and vendor security questionnaires. Requirements Knowledge, Skills & Abilities Must Have: Deep, hands-on experience designing, developing, deploying, and managing security across