Senior Security Engineer - OnMed

At OnMed our purpose is simple but powerful...to improve the quality of life and sense of well-being in our communities by bringing access to healthcare to everyone, everywhere. Our path to everywhere has already begun, with our innovative CareStation, a small but mighty, Clinic-in-a-Box, bringing #healthcareaccess anywhere with an outlet to plug it in. Poised to become a key component in America’s public health infrastructure, the OnMed CareStation is the only tech-enabled, human-led, hybrid care solution that combines the comprehensive experience, trust and outcomes of a clinic, with the rapid scalability of virtual care. At OnMed, every role, everyday, is directly impacting the communities we serve. You’ll join a high-performing purpose-driven team, innovating to break down the barriers that keep people from the care they need. This is not just a job...it's a movement to bring access to healthcare where and when people need it most. It’s healthcare that shows up.

Who You Are

You are a hands-on, deeply technical Security Engineer who designs, builds, deploys, and operates security across cloud, application, network, and physical infrastructure— not from the sidelines, but with your hands on the tools. You are fluent in the Microsoft Azure and Entra ecosystem, you understand networking and firewall rules cold, and you are just as comfortable reviewing application code as you are tuning detections in an XDR/SIEM console and running an incident to ground. You stay current with emerging threats and technologies, you automate what should be automated, and you have enough compliance grounding to translate technical controls into evidence auditors trust. You thrive in a new, fast-paced, high-demand environment and take direct ownership of the security and resilience of the systems that protect our patients’ healthcare data.

Role's Responsibilities

• Designing, building, deploying, and managing security controls hands-on across OnMed’s cloud, application, and network environments— owning the outcomes directly rather than overseeing them from a distance.
• Architecting and hardening the Microsoft Azure and M365/Entra environment—identity, network security groups, firewall rules, and encryption at-rest and in-transit— along with corporate and CareStation field-device endpoints.
• Operating and tuning the security stack day to day: XDR/MDR, SIEM, and SOC workflows—building and refining detections, triaging alerts, and working them hands-on.
• Leading incident response end to end: triage, containment, eradication, root cause analysis, and documentation.
• Designing, reviewing, and maintaining network and firewall architecture—segmentation, rule sets, VPN, and Zero Trust access for the remote workforce and field devices.
• Reviewing application code, integrations, and system designs (in-house and vendor-built) for security gaps, and partnering with engineering on remediation.