Cyber Security Engineer (Security)

Reyes Holdings•Rosemont, IL

13h

About The Position

This role is responsible for leading the global delivery and evolution of enterprise identity services, setting the strategic direction for Identity and Access Management (IAM), executing projects, optimizing services, and collaborating with IT and business units to ensure alignment with objectives and compliance. The position involves accountability for user security and entitlement reviews, interfacing with internal clients and external vendors, and structuring a governance model for people, processes, and technology, adhering to the principle of least privilege access to enhance IAM operational efficiency. Key responsibilities include administering user and system onboarding/offboarding through automated processes, enforcing strong authentication and authorization workflows with OKTA for employees and customers, and monitoring controls to prevent compliance deficiencies in user provisioning. The engineer will also define system scope based on user needs and operational requirements, participate in solution architecture design, and lead security efforts for integrating IAM solutions. Additionally, the role requires managing an on-call rotation for operational support, staying informed about current security threats using CIS Benchmarks, and designing IAM architecture to mitigate these threats. Performance reports from supported systems, including RBAC and CISA, will be provided to track operational metrics, identify issues, and ensure effective delivery according to contract terms. Other duties as assigned.

Requirements

Bachelor’s Degree and 2 to 4 years of related experience OR High School Diploma/General Education Degree (GED) and 5 to 7 plus years of specific experience.
3 plus years of experience in Identity & Access governance and compliance.
Proficiency in designing, supporting, and administering technologies such as IDaaS, single sign-on, directory services (Active Directory, LDAP), user authentication (MFA, passwordless), identity management, and privileged identity management.
Basic understanding of PKI and certificates/key management.

Nice To Haves

Bachelor’s Degree
Information systems certifications such CISSP or CISA (or willingness to achieve)
Experience in driving RBAC design.
Experience working with OKTA and CyberArk.
Experience handling IAM protocols (SAML, OAuth/OIDC, RADIUS, Kerberos) across MacOS, Linux, and Windows platforms.

Responsibilities

Lead the global delivery and evolution of enterprise identity services.
Set IAM strategic direction.
Execute IAM projects and optimize services.
Collaborate with IT and business units to align with objectives and ensure compliance.
Provide accountability for user security and entitlement reviews.
Interface with internal clients and external vendors.
Structure a governance model for people, processes, and technology, aligned with the principle of least privilege access.
Administer the onboarding and offboarding of users and systems with automated processes.
Enforce strong authentication and authorization workflows with OKTA for employees and customers.
Monitor controls to correct situations that could lead to compliance deficiencies in user provisioning.
Formulate and define the system’s scope based on user needs and an understanding of operational and industry requirements.
Participate in solution architecture design and lead security efforts with the integration of identity and access management solutions.
Manage an on-call rotation to provide operational support as needed.
Stay informed about current security threats using CIS Benchmarks.
Design IAM architecture to mitigate threats where possible.
Provide performance reports from supported systems, including RBAC and CISA, to report on operational performance metrics, identify issues and trends, and ensure delivery is effective based on contract terms.
Other duties as assigned.