Principal Cyber Security Engineer - IAM/SSO (Remote)

This is a remote role that can be hired in NC, AZ, and TX.

This position leads daily engineering, operations, analysis, management, and administration of tools, systems, or processes that secure the Bank's information assets and technology infrastructure. Assesses organizational networks, applications, or systems for potential vulnerabilities. Designs and implements technical solutions that strengthen security. Serves as a technical resource to management, associates, and business teams. Acts as a mentor and leader to less experienced associates in the work group.

Duties & Responsibilities:

Security Engineering - Researches and executes process or system improvements that enhance the Bank’s information security. Leads security assessments, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary standards, regulations or best practices. Oversees security projects and associate teams as assigned.
Technical Expertise - Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank’s information systems and resources. Advises management on security protocols and incidents. Mentors and trains associates to ensure team knowledge and effectiveness.
Issue Resolution - Leads the investigation and resolution of incidents. Prepares, reviews, and conveys reports to management regarding incidents. Implements effective monitoring and alert processes to ensure timely recognition of events. Creates playbooks or other documentation that address recurring issues.
Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis.
Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies. Facilitates security strategy across the Bank.

Position Specific Skills:

Knowledge of applicable services, products, technologies, and monitoring or alerting tools
Knowledge of coding and scripting lanuages like Python, Perl, and PowerShell
Knowledge of cryptographic implementations
Knowledge of risk management standards, procedures, and data security practices
Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
Availability to provide after-hours operational support on a rotational basis, with minimal travel

Qualifications:

Minimum Required Education and Experience: Bachelor's Degree and 8 years' experience.

OR

High School Diploma or GED/Equivalent and 12 years' experience in Systems Engineering, Network, or Information Security.

Required:

- Strong, hands-on knowledge of federated authentication protocols, including SAML and OIDC

- Hands-on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping)

- Proven scripting and automation expertise in Python and PowerShell

- Demonstrated experience designing and implementing Infrastructure as Code (e.g., Terraform)

- Experience designing and leading automation of identity and security processes/workflows (e.g., Okta Workflows)

- Working knowledge of step-up / adaptive authentication design

Preferred / Nice-to-Have:

- Experience with identity threat protection platforms (e.g., Silverfort)

- Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)

- Experience across multiple IAM platforms (e.g., both Okta and Ping)

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.

#LI-IK1