Cybersecurity Staff Engineer

SRS Distribution•McKinney, TX

4d•Hybrid

About The Position

At SRS, the Identity & Access Management (IAM) team plays a critical role in strengthening enterprise cybersecurity by enabling secure, scalable, and compliant access across cloud, on-premises, and customer-facing systems. We are seeking a Cybersecurity Staff Engineer – IAM to provide technical leadership for enterprise identity platforms and services, with primary focus on Okta, Microsoft Entra ID, and enterprise directory services. This role will lead strategic IAM initiatives including authentication modernization, identity integrations, automation, and M&A identity transformation efforts while supporting secure and seamless access across the enterprise. The ideal candidate will bring strong experience in enterprise IAM architecture, Okta Workforce Identity, authentication and federation technologies, identity lifecycle management, workflow automation, API integrations, and large-scale identity migration initiatives.

Requirements

8+ years of experience in Identity & Access Management (IAM), Cybersecurity Engineering, or a related field.
7+ years of hands-on experience with Okta, Microsoft Entra ID (Azure AD), and Active Directory.
Deep expertise in SSO, MFA, federation, identity lifecycle management, and authentication technologies.
Strong experience integrating enterprise and SaaS applications using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP.
Strong experience supporting Okta SSO, MFA, Universal Directory, and Lifecycle Management.
Experience managing hybrid identity environments integrating Entra ID and Active Directory.
Advanced experience with REST APIs, API integrations, and testing tools such as Postman.
Strong experience building IAM automation workflows using Okta Workflows, PowerShell, Python, or similar technologies.
Experience supporting IAM integration activities for mergers, acquisitions, and divestitures (M&A).
Excellent communication and stakeholder management skills.
Strong troubleshooting, analytical, and problem-solving skills.
Ability to lead technical initiatives independently in a hybrid work environment.
Experience in cybersecurity, computer science, or engineering is required, with a preference for candidates possessing over eight years of relevant experience.
Demonstrated ability to write code or scripting for the purposes of automation, monitoring, and testing security systems and protocols.
Proven experience in designing, reviewing, and executing security solutions aimed at protecting enterprise-level systems and assets.
Comprehensive understanding of configuring and integrating cybersecurity systems in collaboration with enterprise technology teams to effectively mitigate risks
Proficient in developing, testing, deploying, and operationalizing security monitoring, assessment, and response solutions to address both current and emerging threats.
Robust ability to lead, mentor, and provide guidance to other team members while advocating for professional development within the team.
Experience in facilitating vulnerability management programs across various systems, networking, and engineering teams, ensuring comprehensive risk assessment and mitigation.
Skill in driving engagement across diverse cross-functional teams to achieve strategic cybersecurity goals.
Strong capability in managing conflict and aligning plans to deliver effective execution of security strategies.
Capacity to drive strategic initiatives aimed at enhancing the protection of sensitive data and critical assets, maintaining the highest standards of security for associates and consumers.
Competence in managing and aligning cybersecurity operations with organizational objectives, ensuring the protection of essential infrastructure.
A bachelor's degree in Cybersecurity, Computer Science, Engineering, or a closely related field. Equivalent work experience may be considered in lieu of a formal degree.
Minimum of 8 years of experience in cybersecurity or a related domain demonstrating progressive responsibility and technical expertise.

Nice To Haves

Advanced Technical Expertise: Proven experience with advanced cybersecurity frameworks, methodologies, and protocols.
Proficiency in languages such as Python, Java, or C++, with a strong aptitude for scripting to automate cybersecurity tasks.
Extensive knowledge of cloud security environments, with hands-on experience in AWS, Azure, or Google Cloud Platform.
Strategic and Analytical Skills: Demonstrated ability to conduct thorough risk assessments and develop strategic mitigation plans.
Strong analytical skills to interpret complex technical information and translate it into actionable insights.
Experience in designing and implementing cutting-edge security architectures and solutions.
Leadership and Mentoring: Track record of leading high-performance teams and mentoring junior engineers in cybersecurity best practices.
Experience in managing cross-functional teams and driving large-scale security projects to successful completion.
Collaborative and Communication Proficiency: Excellent interpersonal and communication skills to effectively engage with stakeholders at all organizational levels.
Experience in collaborating with enterprise technology teams to identify, integrate, and implement security tools that align with organizational objectives.
Compliance and Risk Management: Solid understanding of regulatory requirements and industry standards such as GDPR, HIPAA, and NIST.
Expertise in developing and executing comprehensive vulnerability management programs across diverse infrastructures.
Innovation and Problem Solving: Demonstrated ability to innovate and adapt in a dynamic technological landscape, addressing both current and emerging cybersecurity threats.
Strong problem-solving skills with a proactive approach to identifying and resolving complex security challenges.
Master's degree in Cybersecurity, Computer Science, Engineering, or a related field is highly desirable, reflecting a commitment to advanced knowledge and expertise in securing enterprise environments.
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
Certified Cloud Security Professional (CCSP)
GIAC Security Expert (GSE)

Responsibilities

Serve as the technical and functional lead for Okta SSO, MFA, Universal Directory, Lifecycle Management, Microsoft Entra ID, and Active Directory platforms across enterprise environments.
Lead the architecture, engineering, and integration of IAM solutions across cloud and on-premises systems.
Design and implement scalable authentication, federation, and authorization solutions using SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, and SCIM.
Design and implement IAM automation workflows and REST API integrations using Okta Workflows, Postman, PowerShell, Python, or similar technologies.
Lead onboarding and integration of SaaS and enterprise applications into Okta using SSO, MFA, lifecycle management, and provisioning capabilities.
Manage hybrid identity environments and integrations between Okta, Entra ID, Active Directory, cloud platforms, and enterprise applications.
Develop adaptive authentication workflows, contextual access controls, phishing-resistant MFA, and passwordless authentication solutions.
Partner with application owners, enterprise architects, cybersecurity, infrastructure, HR, and business teams to deliver secure and compliant identity solutions.
Lead IAM activities supporting mergers, acquisitions, and divestitures, including identity integration, tenant consolidation, domain migrations, access transition planning, and identity migration strategies.
Assess inherited IAM architectures and support application and user migration activities while ensuring secure access continuity and compliance.
Provide functional leadership and governance for authentication, federation, provisioning, synchronization, and enterprise access management services.
Drive the technical roadmap for Okta and enterprise directory services aligned with cybersecurity, compliance, and Zero Trust initiatives.
Support audit, compliance, and regulatory requirements related to Okta and enterprise directory services.
The Cybersecurity Staff Engineer will report directly to the Cybersecurity Sr. Manager, maintaining a strategic focus on protecting sensitive data and critical assets.
The Staff Engineer will execute initiatives in collaboration with cross-functional teams, ensuring alignment with organizational security objectives.
Responsibilities include designing and implementing security solutions, facilitating vulnerability management programs, and contributing to the development of security monitoring systems.
The position emphasizes leadership through mentoring and guidance within the cybersecurity sphere.
Drive the design, review, and execution of solutions to protect enterprise-level systems.
Provide strategic insight to developing and optimizing cybersecurity solutions that address both current and emerging threats.
Lead teams by example, providing guidance and mentorship to foster professional growth among team members.
Develop others by sharing knowledge, facilitating skill development, and empowering colleagues to achieve cybersecurity objectives.
Utilize cybersecurity technical expertise to write code or scripts for automation, monitoring, and testing purposes.
Employ advanced technical skills in configuring and integrating systems cybersecurity systems in collaboration with enterprise technology teams.
Collaborate with internal teams, such as Networking and Engineering, to facilitate vulnerability management programs and integrate security solutions.
Foster partnerships across the organization to enhance overall cybersecurity posture.
Clearly convey complex cybersecurity concepts and strategies to diverse stakeholders, ensuring alignment on security initiatives and facilitating informed decision-making.
Deliver consistent execution of security monitoring, assessment, and response solutions.
Align projects with strategic plans to optimize security service operations and enhance risk mitigation measures.
Manage and resolve conflicts effectively within teams or projects to maintain focus on cybersecurity goals and ensure the smooth execution of initiatives.
Conduct thorough risk assessments and provide advisory services that proactively address security vulnerabilities and compliance issues, aligning with governance frameworks and strategic security planning.