Sr. Security Engineer

Position Title: Sr. Security Engineer

Location:

US MN Minneapolis Office (preferred). Remote – U.S. or Ontario, Canada.

SPS Commerce is a leading provider of cloud-based supply chain management solutions, serving a global network of retail trading partners. We foster a collaborative and inclusive work environment where innovation and continuous improvement are highly valued. Join SPS Commerce and be part of a dynamic team that's transforming the global retail supply chain!

The Senior Security Engineer – IAM will ensure Company technology, systems, processes, and practices have security defined, integrated, and implemented, according to the SPS security framework to identify, protect, detect, respond, and recover from security events. Together with the security team, broader tech team, and additional stakeholders, this role will ensure that risk‑based controls are implemented to protect SPS.

• Devise reasonable, risk‑based security controls to monitor and protect SPS and align with our business objectives.
• Stay informed of Identity and Access Management (IAM) security best practices and apply them to technology development and implementation practices for operations – accountable for driving the integration of approved IAM security patterns into development operations and existing continuous delivery/continuous improvement business processes.
• Manage IAM and Data Protection platforms and capabilities as well as build new capabilities as needed to meet the needs of our internal and external customers.
• Build automated capabilities to meet the needs and demands of our business customers.
• Help support our operations team ensuring work handed to them is fully documented, properly transitioned, and accepted.
• Develop, manage, and consult on the technical architecture for enterprise security controls.
• Partner with business and technology operations groups to manage and maintain the security technology stack (identity solutions, cloud capabilities, audit tools).
• Support and/or lead periodic internal and external security assessments, third‑party assessments and due‑diligence initiatives.

• Minimum 5 years of experience with bachelor’s degree in related business or technical areas;
  Master’s degree with 3 years of related business or technical areas; or an equivalency of education and work experience.
• Experience working with an IAM platform such as Okta, Sailpoint, Saviynt or similar.
• Experience working in a cloud environment such as AWS, Google Cloud or Azure.
• Equivalent work experiences includes: security engineering/architecture experience and designing and implementing standards, specifications, and procedures.
• Experience in providing technical security guidance to technical and non‑technical audiences.
• Experience with regulatory requirements from SOX, HIPAA, and PCI‑DSS.
• Working knowledge of development operations practices – accountable for driving the integration of security into development operations and existing continuous delivery / continuous improvement business processes.

• System configuration and architecture experience.
• Strong knowledge of industry‑accepted information security best practices, standards, and policies such as NIST CSF, OWASP, CIS, STIG, MITRE ATT@CK, etc.
• Proven ability to manage information security service and operation through effective management of resources.
• Demonstrated experience and understanding of business security and compliance requirements and ability to translate into well‑engineered & integrated business solutions.
• Demonstrated ability to take initiative and accountability for achieving results.
• Driven to understand & appropriately respond to customers' business needs.
• Certifications & Licenses:
  One or more industry certification – CISSP, CISM, CISA, CCFE, GIAC, CCIE, CCSP, ABCP, MBCP, ISA, PCIP, CEH.
• Actively participates and contributes to the security community.

At SPS Commerce, we are committed to ensuring that each employee's compensation reflects their unique experiences, performance, and skills in their role. The salary range for this role considers several factors,…