Cyber Security Engineer III - IAM/SSO (Remote)

This role can be hired remotely in NC, AZ, VA and TX. 

This position ensures the technological and digital security of the Bank at a high level of ability and technical expertise. Mitigates exposure to cyber threats, security risks, and unauthorized access. Assesses organizational networks, applications, or systems for potential vulnerabilities. Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank's information systems and resources. May oversee less experienced associates in the work group.

Duties & Responsibilities:

Technical Security - Administers tools or processes that secure assigned technical areas and data. Participates in security audits, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary protocols, configurations, or procedures.
Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis.
Security Expertise - Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. Provides guidance on appropriate security protocols. Leads technical projects and may serve as a resource to other business units. Ensures team members are trained on the current trends, threats, and applicable technologies.
Issue Resolution - Investigates and resolves complex, escalated security incidents which may include unauthorized access, malware infections, configuration anomalies, cyber attacks, and other risks.
Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies.

Position Specific Skills:

Knowledge of data security practices, procedures. monitoring and alert tools (SCCM, SCOM, and Splunk), and risk management standards
Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, Domain controllers, Lightweight Directory Access Protocol, data loss prevention technologies, encryption technologies, and single sign on technologies
Knowledge of Identity and Access Management concepts and technologies
Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
Availability to provide after-hours operational support on a rotational basis, with minimal travel

Qualifications:

Minimum Required Education and Experience: Bachelor's Degree and 6 years' experience.

OR

High School Diploma or GED/Equivalent and 10 years' experience in Systems Engineering, Network, or Information Security.

Required Skills:

- Working knowledge of federated authentication protocols, including SAML and OpenID Connect (OIDC)

- Demonstrated experience automating repetitive security or identity tasks

Preferred / Nice-to-Have:

- Scripting and automation experience using PowerShell

- Python scripting experience

- Experience with one or more enterprise IAM/SSO platforms (e.g., Okta, Ping)

- Familiarity with step-up / adaptive authentication concepts

- Exposure to Infrastructure as Code practices (e.g., Terraform)

- Experience building identity or security workflow automations (e.g., Okta Workflows)

- Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)

- Familiarity with identity threat protection tools (e.g., Silverfort)

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.