Sr. Security Engineer- IAM DevSecOps

E-Solutions Group - Johnston, RI

Full-time - Mid Level

Johnston, RI

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Sr. Security Engineer- IAM DevSecOps role is focused on enhancing the security of Identity and Access Management (IAM) within the organization. This position requires a highly motivated individual to lead multiple projects while developing and maintaining DevSecOps controls. The engineer will collaborate with software and system engineers to integrate security measures into the CI/CD pipeline, ensuring robust technical design and high availability of services.

Responsibilities

• Drive continuous improvement for the security of Identity and Access Management in CFG.
• Deliver timely guidance and robust DevSecOps solutions to address IAM security needs.
• Review and lead the gathering of business, functional and technical requirements for establishing a secure IAM environment.
• Build prototypes and proofs of concept to demonstrate feasibility for new, innovative security technologies.
• Assist with setting task and project priority using Agile methodology and follow through the board as decided.
• Meet and work with others to understand application and user needs from Access Controls management.
• Define and configure projects using Git and Terraform, integrating with various secrets engines and backends.
• Assist with Jenkins pipeline creation, configuration, and vault interoperability.
• Monitor health and performance of IAM controls using DataDog and Splunk data aggregation tools.
• Ensure that security policy, compliance requirements, and Cloud platforms best practices are implemented across all projects.

Requirements

• Extensive experience with IAM.
• Minimum of 5 years of development/operational experience with identity governance tools including implementation, installation, configuration & administration of various components.
• 5 or more years' experience of advanced knowledge in Windows, Active Directory/Entra ID, Microsoft SharePoint.
• Past experience with pushing technical initiatives, team, project or indirect management of security technologies.
• Hands-on experience with authentication & authorization on file shares and database access controls.
• Hands-on experience Re-ACL from legacy platform/application to modern platforms.
• Ability to effectively present Re-ACL concepts to stakeholders with various levels of technical understanding.
• Knowledge and ability to leverage existing CFG IAM capabilities for custom integrations and solutions.
• Solid understanding of identity and access management and security policy concepts, protocols and best practices.
• Strong understanding of cloud computing architecture, technical design and implementations, including IaaS, PaaS, and SaaS delivery models.
• Previous experience in Identity and Access Management or Information Security with a solid understanding of the requirements and goals of IAM as a regulatory and security function.
• Experience with the Dev/Sec/Ops model and Agile tools and processes, including Atlassian products such as Jira and Confluence, Trello, Scrum and Kanban.
• Experience with HashiCorp Terraform.
• Experience with Linux and Windows Server operating systems.
• Experience with version control systems, primarily Git.
• Experience with Kubernetes and Docker.
• Experience with automation/CI/CD systems, primarily Jenkins.
• Experience with building scalable Cloud infrastructure and processes.
• Experience in CI/CD methodology and applying the DevOps mindset and principles.
• Experience in systems operations management and maintaining environments for enterprise applications.
• Proven experience in collaborating with cross-functional business units.
• Experience managing Cloud platform spending through metrics and reporting.
• Excellent written and verbal communication skills.

Benefits

• Medical Plan
• 401(k) Plan
• Life Insurance
• Vacation Time
• Sick Leave
• Paid Holidays
• Paid Paternity and Maternity Leave