IT Security Engineer III

Sprouts Farmers Market•Phoenix, AZ

15h•Hybrid

About The Position

The Security Engineer III is a senior individual contributor responsible for designing, implementing, and continuously improving the organization’s cybersecurity infrastructure and security controls. This role provides technical leadership across security engineering, identity and access management, endpoint and data protection, cloud security, compliance, and threat prevention. The role owns the end-to-end lifecycle of security controls, from design and implementation through monitoring, validation, and continuous improvement. Working closely with Infrastructure, Applications, Retail Systems, Legal, Risk, HR, and business partners, the Security Engineer III is responsible for developing automation, integrations, and scalable solutions that enhance security effectiveness, improve efficiency, and reduce manual effort. The role reports to our Store Support Office in Phoenix, AZ, with a hybrid work arrangement requiring in-office presence Tuesday through Thursday.

Requirements

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent combination of education and experience.
5+ years of cybersecurity, information security, or related IT engineering experience.
Demonstrated ownership of enterprise security platforms from design through implementation and operational support.
Strong knowledge of security architecture, risk management, endpoint security, identity security, cloud security, and network security principles.
Experience implementing and managing security technologies in enterprise environments.
Strong understanding of network protocols, encryption standards, authentication technologies, and security best practices.
Experience with security automation, scripting, API integrations, and operational efficiency initiatives.
Knowledge of compliance and security frameworks such as NIST CSF, CIS Controls, and SOX-related controls.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent written, verbal, and interpersonal communication skills.
Ability to manage multiple priorities in a fast-paced environment.

Nice To Haves

Microsoft Azure (IaaS, PaaS, Entra ID, Exchange Online)
Active Directory
Okta or Microsoft Entra ID
Netskope or comparable SASE/SWG/CASB platforms
Proofpoint or other secure email gateway solutions
CrowdStrike Falcon
BeyondTrust or equivalent Privileged Access Management tools
Microsoft Purview
SIEM and security monitoring platforms
Intune, Endpoint Manager, and Configuration Manager
Windows Server administration
Windows 10/11 endpoint management
ServiceNow (ITSM/SecOps)
PowerShell, Python, and REST API integrations
DevSecOps and CI/CD security practices
Network security technologies including firewalls, NAC, IDS/IPS, and Zero Trust architectures
CISSP preferred
GIAC certifications
Microsoft Security certifications
CCSP, Security+, or equivalent industry certifications
ITIL 4 knowledge preferred

Responsibilities

Design and implement enterprise security solutions across network, endpoint, cloud, identity, email, and data protection domains.
Assess and enhance the organization's security architecture to address emerging threats and vulnerabilities.
Configure and maintain secure system settings and hardening standards, including alignment to applicable benchmarks and best practices.
Research, evaluate, and recommend new security technologies, tools, and proof-of-concept solutions.
Integrate security controls into infrastructure and application deployments through partnership with cross-functional teams.
Support cloud security initiatives across Microsoft Azure and related services.
Monitor security alerts, analyze logs, investigate threats, and coordinate remediation activities.
Develop and implement response strategies for detected threats, minimizing business impact and reducing risk exposure.
Serve as an escalation point for security incidents and security-related operational issues.
Troubleshoot and resolve security technology failures and control gaps.
Develop automation and integrations that improve monitoring, reporting, detection, and remediation capabilities.
Administer and maintain identity security controls, including SSO, SAML, SCIM, conditional access, MFA, and privileged-access management.
Manage endpoint security technologies, including endpoint protection, privilege management, device compliance, and endpoint hardening.
Oversee data loss prevention, email security, and information protection controls.
Secure and enable enterprise AI/LLM adoption, including application discovery, data-egress and DLP controls for AI tools, and sanctioned-application enablement.
Manage encryption, authentication, credential, key management, and enterprise secrets-management solutions.
Conduct privileged account, service account, and access governance reviews.
Support enterprise information security governance, risk, and compliance initiatives.
Perform security assessments and recommend improvements to strengthen security posture.
Execute recurring security controls and provide audit evidence for compliance reviews.
Evaluate risks associated with vendors, suppliers, and third-party partners and recommend mitigation strategies.
Assist with compliance activities aligned with applicable regulatory and security frameworks.
Develop and maintain security policies, standards, procedures, and technical documentation.
Lead security-focused projects and initiatives.
Provide technical guidance and mentoring to other security team members.
Drive security requirements through partner teams' implementation and change-management processes.
Deliver security awareness and best-practice education to employees and stakeholders.
Participate in a shared 24/7 on-call rotation as required.

Benefits

Competitive pay
Sick time plan that you can use to support you or your immediate families health
Vacation accrual plan
Opportunities for career growth
15% discount for you and one other family member in your household on all purchases made at Sprouts
Flexible schedules
Employee Assistance Program (EAP)
401(K) Retirement savings plan with a generous company match
Company paid life insurance
Contests and appreciation events throughout the year full of prizes, food and fun!
Bonus based on company and/or individual performance
Affordable benefit coverage, including medical, dental and vision
Health Savings Account with company match
Pre-tax Flexible Spending Accounts for healthcare and dependent care
Company paid short-term disability coverage
Paid parental leave for both mothers and fathers
Paid holidays
DailyPay - access earned wages before payday