IAM InfoSec Engineer - Chatsworth onsite daily

Premier America Credit Union•Los Angeles, CA

67d•$130,000 - $140,000•Onsite

About The Position

The IAM Information Security Engineer designs, implements, and maintains security controls to protect the credit union’s systems, infrastructure, and data. The role ensures security capabilities are preventive, detective, and responsive while supporting regulatory compliance and audit readiness. The engineer works with IT, Infrastructure, Cloud, and Application teams to embed security into daily operations and implements the enterprise Identity and Access Management (IAM) framework governing role-based access for employees, contractors, and temporary staff. The position maintains documentation for certification and accreditation of information systems in accordance with FFIEC requirements; assesses the impacts of system modifications and technological advances; identifies security weaknesses; recommends and implements improvements; and documents upgrades in alignment with NIST familiarity. This role is based onsite daily in Chatsworth.

Requirements

At least 5 years of experience in information security engineering, infrastructure security, or related roles, including experience developing and implementing access management frameworks.
Experience with Microsoft Active Directory and Agile, DevSecOps, and ITIL practices.
Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent experience.
At least one certification from the listed categories: ISC2 Cybersecurity (CC), CISM, GIAC, or Security+.
Knowledge of identity lifecycle and governance processes.
Understanding of technology and solutions for financial services, such as Jack Henry.
Cross-functional understanding of the organization and its lines of business.
Hands-on experience securing Windows and/or Linux server environments, network infrastructure, and firewalls.
Experience with identity systems and privileged access management; strong understanding of cybersecurity principles, including least privilege and defense in depth.
Ability to document technical controls clearly for audit and executive audiences.
Experience in a financial institution or highly regulated environment.
Ability to communicate clearly and concisely in oral, written, and presentation formats with executive, business, and technical audiences.
Extremely detail-oriented.
Ability to develop creative solutions for specific needs.

Nice To Haves

Familiarity with ISO, NIST Cybersecurity Frameworks, CIS Controls, or similar standards.
Experience with cloud security in Azure and AWS.
Security certifications such as ISC2 CC, SSCP, CCSP, CISM, GIAC, Security+, or vendor-specific credentials.
Experience supporting security tools such as SIEM, PAM, vulnerability scanners, and/or EDR platforms.

Responsibilities

Design, implement, and maintain security controls across network, endpoint, server, cloud, and identity platforms.
Configure, tune, and support security tools, including EDR/XDR, firewalls, network segmentation, IDS/IPS, IAM, MFA, privileged access controls, vulnerability management, and configuration-hardening tools.
Monitor security alerts, investigate suspicious activity, and support incident containment and remediation.
Work with IT teams to prioritize vulnerability remediation based on risk, exposure, and business impact; track remediation and validate corrective actions.
Participate in security incident response, including detection, investigation, containment, recovery, forensic data collection, and evidence preservation as required.
Provide technical input to risk assessments, vendor reviews, and exception requests.
Review system designs and architecture for security risks and control gaps.
Develop and implement the IAM framework, partnering with stakeholders to ensure processes meet regulatory requirements and best practices.
Help determine security requirements for business processes and technology systems using accepted risk-analysis methods, functional and performance requirements, security architecture principles, and market-leading solutions.
Support the creation, tracking, and completion of compliance findings related to IAM.
Participate in audit activities concerning IT access for internal and external audits.
Maintain information-system certification and accreditation documentation in accordance with FFIEC requirements.
Assess the impacts of system modifications and technological advances; identify weaknesses, recommend improvements, implement changes, and document upgrades.
Stay current with changes and improvements in systems and technology.
Establish and maintain effective communication and coordination with company personnel and management; keep management informed of activities and significant problems.
Complete required reports, records, and other documentation.
Maintain professional business relations with vendors and trade professionals; resolve requests, questions, and problems professionally and communicate efficiently and effectively.
Help drive continuous quality and process improvement within InfoSec and IT.