Senior Software Engineer II, Security

About Tempus AI Tempus is making precision medicine a reality by applying AI in healthcare, deriving insights from our expansive library of clinical data and molecular data. We enable physicians to make real-time, data-driven decisions to deliver personalized care and targeted therapies for patients through our analytical machine learning platform that uses the power of artificial intelligence in healthcare. We also work with partners to facilitate discovery, development, and delivery of optimized therapeutic options for patients through distinctive solution sets. Our mission is for each patient to benefit from the treatment of others who came before by providing the healthcare industry tools that learn as we gather more data. It’s About Time. For more information, visit tempus.com.

Tempus AI

Tempus AI, Inc. (NASDAQ: TEM) is a technology company leading the adoption of AI to advance precision medicine.

T

tempus.com

1,001-5,000 employees

Biotechnology Research

Chicago, IL

2015

Public Company

130k LinkedIn followers

Raised $2.8B

• best-in-class customer identity management, authorization, and observability
• systems.
• Improve existing security microservices, custom frameworks, and tooling by
• addressing technical gaps and implementing emerging standards.
• Collaborate cross-functionally to implement internal security standards
• across a microservice architecture.
• Partner with product teams and stakeholders to balance project priorities,
• scope, and trade-offs.
• Drive continuous improvements in engineering tooling, designs, and
• processes.
• Configure and manage complex technical services tooling such as Auth0, Okta,
• Auth0-FGA, Chronicle, Terraform, and GCP.
• At Tempus, software products are owned and developed by small, autonomous teams
• composed of developers, designers, scientists, and product managers. Our teams
• set the goals, build the software, deploy the code, and contribute to a growing
• software platform that will make a lasting impact in the fields of cancer
• research and precision medicine.Tempus builds software as nimble as our teams.
• Our modern tech stack - dynamic languages and the latest open source and cloud
• services - allows our teams to iterate rapidly and lead our industry in
• innovation. Our decentralized, microservice architecture and emphasis on loosely
• coupled architecture and automation allow us to deliver advanced solutions with
• confidence, and at scale.
• controls need to evolve. As the Sr. Software Engineer II for Security
• Engineering you will drive the complex implementation of Tempus’ security
• vision to ensure Tempus’ patients records and IP are safely utilized by the
• latest technologies.
• You have experience driving implementation of holistic solutions across a
• complex micro-service architecture. Working to build reusable components and
• ensuring they’re easily consumable by your colleagues on different teams.
• You've got several years of experience working on software development teams,
• and are confident in working independently and collaboratively on a critical
• system, ensuring uptime and reliability.
• You have experience developing and securing distributed, event-based systems
• at an interesting scale of transaction and/or data volume.
• You've worked in fast-paced, agile environments and helped keep projects on
• track, troubleshoot roadblocks, write documentation, and coordinate
• cross-team collaboration.
• You collaborate well with diverse, talented teams while mentoring and
• learning from team members regardless of experience level.
• You have experience working with cloud infrastructure providers (Amazon Web
• Services, Google Cloud, etc), and related tools like Docker, Terraform, or
• Kubernetes.
• You’ve have familiarity with an identity management platform like Auth0,
• Okta, Microsoft Entra, or Ping Identity.You are confident in a variety of
• technical scenarios and can lead a complex implementation across an
• engineering organization.
• Lead complex implementations for the security engineering team to ensure best
• in class customer identity management, authorization, and observability
• systems across the business.
• Improve the existing security micro-services, custom frameworks, and tooling
• by identifying technical gaps, incorporating new requirements, and
• implementing emerging standards.
• Work with a variety of teams cross-functionally to implement internal
• standards for security across a micro-service driven architecture.
• Work with product team members and stakeholders to discuss project
• priorities, scope, and trade-offs to deliver the right solutions at the right
• time.
• Drive improvements in engineering tooling, designs, and processes and make
• the case for and driving improvements.
• Implement new technologies and ideas within the broader organization, and the
• ability to communicate effectively and without bias while accepting critical
• feedback.
• Own the configuration of complex technical services tooling such as Auth0,
• Okta, Auth0-FGA, Chronicle, Terraform, and GCP.
• The expected salary range above is applicable if the role is performed from
• California and may vary for other locations (Colorado, Illinois, New York).
• Actual salary may vary based on qualifications and experience. Tempus offers a
• full range of benefits, which may include incentive compensation, restricted
• stock units, medical and other benefits depending on the position.
• Additionally, for remote roles open to individuals in unincorporated Los Angeles
• including remote roles- Tempus reasonably believes that criminal history may
• have a direct, adverse and negative relationship on the following job duties,
• potentially resulting in the withdrawal of the conditional offer of employment
• engaging positively with customers and other employees; accessing confidential
• information, including intellectual property, trade secrets, and protected
• health information; and appropriately handling such information in accordance

Preferred

• Knowledge of identity standards like OAuth, SCIM, and SAML.
• Experience with TypeScript, JavaScript, Node.JS, or Python.Experience with
• OAuth 2.1 emerging agentic controls.
• Experience with Chronicle or other SIEMs.
• Experience with various authorization models, RBAC, ReBAC, ABAC and PBAC.

• Incentive compensation
• Restricted stock units
• Medical benefits