Cyber Security Engineer III - IAM​/SSO; Remote

Cybersecurity Specialist

This role can be hired remotely in NC, AZ, VA, and TX.

This position ensures the technological and digital security of the Bank at a high level of ability and technical expertise. Mitigates exposure to cyber threats, security risks, and unauthorized access. Assesses organizational networks, applications, or systems for potential vulnerabilities. Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank's information systems and resources.

May oversee less experienced associates in the work group.

Duties & Responsibilities:

Technical Security
- Administers tools or processes that secure assigned technical areas and data. Participates in security audits, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary protocols, configurations, or procedures.

Analysis
- Identifies and evaluates potential threats or vulnerabilities in the Bank's networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis.

Security Expertise
- Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. Provides guidance on appropriate security protocols. Leads technical projects and may serve as a resource to other business units. Ensures team members are trained on the current trends, threats, and applicable technologies.

Issue Resolution
- Investigates and resolves complex, escalated security incidents which may include unauthorized access, malware infections, configuration anomalies, cyber attacks, and other risks.

Business Strategy
- Assists senior leadership in the development of security policies, standards, and strategies.

Position Specific

Skills:

Knowledge of data security practices, procedures, monitoring and alert tools (SCCM, SCOM, and Splunk), and risk management standards. Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, Domain controllers, Lightweight Directory Access Protocol, data loss prevention technologies, encryption technologies, and single sign on technologies. Knowledge of Identity and Access Management concepts and technologies.

Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments. Availability to provide after-hours operational support on a rotational basis, with minimal travel.

Qualifications:

Minimum Required

Education and Experience:

Bachelor's Degree and 6 years' experience.

OR

High School Diploma or GED/Equivalent and 10 years' experience in Systems Engineering, Network, or Information Security.

Preferred

Skills:

Working knowledge of federated authentication protocols, including SAML and OpenID Connect (OIDC). Demonstrated experience automating repetitive security or identity tasks. Scripting and automation experience using Power Shell. Python scripting experience. Experience with one or more enterprise IAM/SSO platforms (e.g., Okta, Ping). Familiarity with step-up / adaptive authentication concepts. Exposure to Infrastructure as Code practices (e.g., Terraform). Experience building identity or security workflow automations (e.g., Okta Workflows).

Familiarity with passwordless technologies (e.g., Windows Hello, Okta Fast Pass). Familiarity with identity threat protection tools (e.g., Silverfort).