System Integration Engineer II at Onco360

Louisville, Kentucky, United States -

Full Time

Start Date

Immediate

Expiry Date

12 Aug, 26

Salary

82000.0

Posted On

14 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SFTP, AS2, SAML 2.0, OIDC, OAuth 2.0, MFT Platforms, Azure AD, Okta, PKI, PGP Encryption, PowerShell, Python, Terraform, RBAC, SSL/TLS, Network Security

Industry

Pharmaceutical Manufacturing

Description

Are you searching for an IT Position with a growing company that makes a difference? We are looking for a System Integration Engineer II to join our team! Onco360 Pharmacy is a unique oncology pharmacy model, created to serve the needs of community, oncology and hematology physicians, patients, payers, and manufacturers. Our Onco360 Corporate Office in Louisville, Kentucky has an immediate need for a System Integration Engineer II. We offer a competitive salary starting at $82K and company benefits! Benefits * Medical, Dental & Vision insurance * 401k with a match * Paid Time Off and Paid Holidays * Tuition Reimbursement * Paid Volunteer Day * Floating Holiday * Referral Incentive * Paid Life, and short & long-term disability insurance Summary The System Integration Engineer is responsible for the design, implementation, and lifecycle management of secure data-exchange platforms and identity-integration services. This role ensures the secure transfer of business-critical data via SFTP and AS2 while managing Single Sign-On (SSO) integrations and Identity Provider (IdP) configurations. The engineer will serve as a subject-matter expert to ensure that external partners and internal systems communicate through hardened, encrypted, and identity-verified channels. Major Responsibilities Secure Data Exchange & MFT * Architect & Support: Design, implement, and maintain enterprise-grade MFT platforms (e.g., GoAnywhere, Cerberus, Cleo, IBM Sterling) to support SFTP, AS2, and HTTPS protocols. * B2B Onboarding: Provision and manage complex partner connections, including authentication logic, directory structures, and automated routing workflows. * AS2 Management: Oversee AS2 configurations, including synchronous/asynchronous MDNs, digital signatures, and payload encryption. * Encryption Standards: Enforce high-standard security controls, including SSH, TLS 1.3, and PGP encryption for data at rest and in transit. Identity & SSO Integration * SSO Implementation: Lead the integration of internal and third-party applications with Identity Providers (e.g., Azure AD/Entra ID, Okta) using SAML 2.0, OIDC, and OAuth 2.0. * MFT Identity Hardening: Secure the MFT management console and user portals by implementing Multi-Factor Authentication (MFA) and SSO-based administrative access. * User Provisioning: Develop and maintain automated user provisioning/deprovisioning workflows using SCIM or custom scripting to ensure access aligns with the Principle of Least Privilege. * Access Governance: Define and audit Role-Based Access Control (RBAC) policies for data exchange folders and integration platforms. Security Operations & Engineering * Certificate Lifecycle: Own the end-to-end management of digital certificates (SSL/TLS, AS2, PGP), including automated renewal, rotation, and vaulting. * Automation: Develop "Infrastructure as Code" style automation for partner onboarding and SSO app registrations using PowerShell, Python, or Terraform. * Monitoring & Response: Establish proactive monitoring for connection failures, identity anomalies, and performance bottlenecks; serve as Tier 3 support for complex integration outages. * Compliance & Auditing: Support GxP, HIPAA, and PCI-DSS audits by providing detailed logs, workflow documentation, and evidence of security hardening. * Perform other tasks as assigned. * Conducts job responsibilities in accordance with the standards set out in the Company’s Code of Business Conduct and Ethics, its policies and procedures, the Corporate Compliance Agreement, applicable federal and state laws, and applicable professional standards. Education/Learning Experience Required: Bachelor's degree in IT, Computer Science, or a related field (or equivalent experience) Desired: Masters’s degree in IT, Computer Science, or related field Work Experience * Required: 5+ years in Security Engineering, Identity Management, or B2B Integration in a mid to large enterprise. Proven experience configuring SAML/OIDC integrations and managing enterprise MFT solutions. * Desired: Experience in pharmaceutical and healthcare IT environments Skills/Knowledge * Required: Advanced expertise in SFTP, AS2, HTTPS, SAML, OIDC, and OAuth. Deep understanding of IdP mechanics, claim transformations and MFA implementation. Expert level knowledge of PKI, certificate chains, SSH key management and PGP. Solid grasp of DNS, firewall rules (NAT/PAT), load balancing (F5/Azure ALB), and WAFs. Proficiency in PowerShell or Python for automating security tasks and API interactions. * Desired: Familiarity with CPR+, IPS, or other pharmacy-related systems. Familiarity with Cloud computer platforms (Azure, AWS, or Google Cloud). Experience implementing and maintaining security best practices for endpoint management. Understanding of HIPAA compliance and disaster recovery planning. Database and scripting experience. Licenses/Certifications Required: CISSP, Security+, or GIAC (GSEC). Microsoft certified: Identity and Access Administrator (SC-300). Certified Professional in GoAnywhere, Cerberus, Cleo, or similar MFT platforms.

Responsibilities

Design and manage secure data-exchange platforms and identity-integration services to ensure secure business-critical data transfer. Lead the implementation of SSO integrations and manage the lifecycle of digital certificates and MFT platforms.