If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!
Position Overview:
The Sr. Security Engineer – IAM is a mid to senior-level role responsible for driving the design, development, and advancement of SECU’s IAM program.
This individual will serve as a subject matter expert (SME) and technical lead, providing support as well as participating in the strategic direction, implementation, and continuous improvement of IAM solutions, including Privileged Access Management (PAM), Single Sign-On (SSO), Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Active Directory (AD), Customer Identity and Access Management (CIAM), and other IAM technologies.
This role will be instrumental in designing and optimizing IAM frameworks, automating identity processes, and ensuring compliance with security policies and regulatory requirements. The engineer will collaborate with cybersecurity, IT, and business stakeholders to enhance security posture, mitigate identity-related risks, and drive IAM adoption.
Additionally, they will mentor junior engineers, lead complex IAM projects, and provide technical guidance to strengthen the overall cybersecurity strategy.
Essential Responsibilities:
Responsibilities will include participation in special assignments and cross-functional initiatives as required.
Required Education & Experience (Knowledge, Skills, & Abilities):
o Additional 3 years of relevant experience can be considered in lieu of degree.
o Proficient in implementing or supporting two or more IAM solutions such as PAM, SSO, Directory Services, IGA, CIAM, and MFA
o Experience in implementing integrations between multiple IAM solutions.
o Knowledge of cloud directories such as Entra ID, AWS Directory Service, and Google Cloud Identity.
o Knowledge of hybrid IAM environments and cloud-to-cloud identity integration.
o Understanding of APIs how they are used to integrate IAM systems with other applications.
o Understanding of authentication and authorization protocols such as OAuth2.0, OIDC (OpenID Connect), SAML (Security Assertion Markup Language), LDAP (Lightweight Directory Access Protocol), Kerberos, and XACML (eXtensible Access Control Markup Language).
o Familiarity with IAM governance frameworks and standards such as NIST, ISO 27001, SOX, and GDPR.
o Experience with audit and compliance reporting.
o Experience in provisioning and de-provisioning user accounts, including Joiner-Mover-Leaver (JML) processes.
o Experience with automation of user lifecycle management using tools such as PowerShell, Python, or IAM orchestration tools.
o Experience in implementation or support of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
o Understanding of IAM’s role in broader security frameworks and risk management.
o Understanding of threat modeling and risk assessment related to identity and access.
o Ability to support IAM-related incident response efforts, including identifying and mitigating identity-based security incidents.
o Understanding of forensic analysis related to identity breaches.
o Ability to leverage and understand scripting languages such as Python, PowerShell, or Bash for automating tasks.
o Experience in participating in cross-functional teams in IAM initiatives.
o Ability to collaborate with security, IT operations, developers, and business stakeholders to align IAM solutions with organizational goals.
o Strong problem-solving skills for troubleshooting and resolving IAM issues.
o Analytical skills for identifying patterns and improving IAM processes.
Preferred Education & Experience (Knowledge, Skills, & Abilities):
Job Environment & Physical Requirements:
Authorizations:
Must be completed prior to submission.
SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.
Even though we're North Carolina's largest credit union, we're still just "people helping people." We currently serve over 2.6 million members through more than 270 branch offices - and growing! Members have 24/7 access to account services from over 1,100 ATMs, as well as via phone, our website, and the SECU Mobile App.
Since 1937, we've provided financial services to employees of the State of North Carolina, public boards of education, and employees of associations formed for the benefit of State employees, as well as their immediate family members. We are the trusted provider of financial services for millions of members. And, according to Forbes Magazine, we're the best credit union in North Carolina.
State Employees' Credit Union (SECU) is an Equal Housing Opportunity lender and federally insured by NCUA. SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
See full social media terms and conditions by accessing our Terms of Use at ncsecu.org/legal
