IT & Security Engineer (Contract)

Parachute Health is transforming post-acute care as the leading digital ordering platform for medical equipment and supplies. We connect major health systems, health plans, and suppliers to help patients get the life-saving products they need at home. Since launching, we've connected 300,000+ clinicians and 3,000+ supplier locations across all 50 states and helped 15M+ patients. What started as a DME ePrescribing tool has become the order management platform of choice for home medical equipment.

Join our team and make a difference in patient care.

About the Role

You'll join Parachute Health 's IT & Security team, working alongside engineers and analysts who keep our healthcare technology environment secure, compliant, and operationally efficient. You'll gain hands-on exposure to identity, endpoint, network, and cloud security, compliance, and incident response in an environment governed by SOC 1, SOC 2, and HITRUST CSF.

You won't just sit behind a desk. You'll be a part of a fast-paced environment, work closely with IT and Security professionals on real projects and sit in on incident response and architecture discussions
Responsibilities
IT operations & endpoint

- Support day-to-day IT operations: user onboarding/off-boarding, hardware provisioning, troubleshooting tickets, and end-user support.

- Help manage our macOS laptop fleet, MDM enrollment, configuration, software deployment, and compliance baselines.

- Troubleshoot connectivity, hardware, software, and authentication issues across Mac, Linux, and Windows environments.

- Document fixes, runbooks, and FAQs to help the team scale.

Identity & access

- Assist with Okta administration, user lifecycle, group management, SSO/MFA configuration, application assignments, and access reviews.

- Help run periodic access reviews and collect audit evidence.

Network & security tooling

- Support ZScaler operations, policy review, bypass requests, log analysis, and user troubleshooting.

- Help maintain DLP policies and triage alerts for potential data exfiltration.

- Assist with WAF rule review, false-positive tuning, and traffic analysis (AWS WAFv2 / Akamai).

- Support SIEM operations in Splunk/Wazuh by querying logs, building dashboards, and tuning alerts.

Scripting & automation

- Write and maintain scripts to automate repetitive IT/Security tasks - log analysis, evidence collection, ticket enrichment, account hygiene, and reporting.

- Build small tools that make the team faster (no full-stack development required).

- Contribute to and use AI/agentic workflows the team has built (MCP servers, Claude-based runbooks) to accelerate investigations.

Requirements

- Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, IT Management, or a related field.

- Scripting in Python or Bash is required . You can independently write, read, and debug working scripts to automate IT/Security tasks — parsing logs, calling APIs, generating reports, cleaning up accounts.

- Working knowledge of the Linux command line: file system navigation, permissions, process management, and log inspection (grep, awk, sed, tail, journalctl).

- Comfort with macOS as a daily-driver OS and ability to troubleshoot common Mac issues.

- Solid IT troubleshooting fundamentals across hardware, software, and OS (Mac, Windows, Linux).

- Networking fundamentals: DNS, DHCP, VPN, TLS, and the ability to diagnose connectivity issues methodically.

- Understanding of authentication and identity concepts: SSO, SAML, OAuth/OIDC, MFA, and user lifecycle/group management in an IdP (Okta or equivalent).

- Working proficiency with Git, GitHub, and the terminal — you can clone a repo, branch, commit, and open a PR.

- Ability to read and interpret logs to answer a question or trace an issue (system logs, application logs, or SIEM output).

- Actively follows trends in IT, cybersecurity, and AI, with a strong desire to experiment with new tools.

- Strong writ