Job description
RxSense is a leading healthcare technology company delivering innovative solutions for pharmacy benefits and prescription savings. Our enterprise platform brings transparency, flexibility, and efficiency to pharmacy benefit management, helping clients streamline operations and enabling consumers to save on prescriptions. By integrating intelligence across the pharmacy ecosystem, RxSense makes cost-effective healthcare more accessible. Whether for PBMs, pharmacies, or individuals, our solutions help modernize operations, reduce costs, and improve outcomes.
RxSense also owns and operates SingleCare, a free prescription savings service that offers consumers access to consistently low prices on prescription drugs. Through its partnerships with the country’s largest pharmacies and grocers, including CVS, Walgreens, Walmart, Kroger and Albertsons, SingleCare improves access and adherence to affordable medications and has helped millions of Americans save over $11 billion on their medications.
RxSense is a great place to work! Our company has earned several prestigious awards, including Fast Company’s Most Innovative Companies, Forbes’ Top Startup Employers, Modern Healthcare’s Best Places to Work in Healthcare, and Inc’s Best in Business and Best Workplaces.
About the Role:
We’re seeking an experienced IAM Quality Engineering (QE) Engineer to join our growing QA team. In this role, you’ll be responsible for designing, implementing, and executing test strategies for Identity and Access Management systems. You’ll ensure the secure and reliable operation of authentication, authorization, provisioning, SSO, and related services across web and mobile platforms.
This role is ideal for someone who thrives in a fast-paced, security-conscious, highly regulated environment, and has a strong background in both automation and IAM security concepts.Key Responsibilities
- Develop and execute comprehensive test plans and test cases for IAM systems including authentication (MFA, SSO), authorization, role-based access control (RBAC), provisioning/de-provisioning, and audit logging.
- Collaborate with IAM architects, security engineers, and application teams to validate end-to-end access flows.
- Design and implement automated test scripts using tools such as Selenium, Postman, ReadyAPI, or custom frameworks for web, mobile, and API-based IAM flows.
- Perform negative, edge-case, and regression testing on login, identity federation (SAML/OIDC), user management, and permission-based access controls.
- Support and validate integrations with third-party identity providers (e.g., Okta, Azure AD, Auth0).
- Conduct security validation testing for IAM-related vulnerabilities such as insecure redirects, session hijacking, token leakage, and privilege escalation.
- Ensure test environments mimic production IAM configurations and manage test identities across environments.
- Review and maintain traceability matrices, test documentation, and compliance-aligned quality artifacts.
- Participate in Agile ceremonies and collaborate with cross-functional teams to embed quality early in the SDLC.
- Support performance and load testing of login/auth flows and analyze IAM-related metrics from logs and monitoring tools.
Qualifications:
- 5+ years of experience in Quality Engineering or Test Automation, with 2+ years focused specifically on IAM systems.
- Strong understanding of IAM protocols and concepts: SAML, OAuth2, OIDC, MFA, RBAC, SCIM, JWT, and session/token handling.
- Proficient in testing and automating web, API, and mobile flows using tools like Selenium, Postman, ReadyAPI, Katalon, or similar.
- Experience working with identity providers (IdPs) such as Okta, Azure AD, Auth0, or custom SSO systems.
- Familiarity with security testing best practices and tools (e.g., OWASP ZAP, Burp Suite, Snyk, etc.).
- Strong scripting skills (e.g., Python, JavaScript, or Java) for test automation and utilities.
- Comfortable working in Agile environments and using CI/CD tools like GitHub Actions, Jenkins, or CircleCI.
- Excellent problem-solving skills, attention to detail, and a security-first mindset.
- Experience in regulated industries (e.g., healthcare, finance) is a strong plus.
Nice to Have
- Experience with IAM auditing and compliance testing (e.g., SOX, HIPAA, HITRUST).
- Familiarity with IAM platforms like ForgeRock, Ping Identity, or Keycloak.
- Exposure to infrastructure-as-code or configuration automation for IAM systems (e.g., Terraform for Okta).
- Performance testing experience with tools like k6 or JMeter targeting login and token workflows.
Salary Range: 120,000 - 140,000
RxSense believes that a diverse workforce is a more talented and productive workforce. As such, we are an Equal Opportunity and Affirmative Action employer. Our recruitment process is free from discriminatory hiring practices and all qualified applicants are considered for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity, ancestry, age, or national origin. Neither will qualified applicants be discriminated against on the basis of disability or protected veteran status. We believe in the strength of the collaboration, creativity and sense of community a diverse workforce brings.
