Lead Security Engineer

Office Depot•Austin, TX

9d•$100,000 - $130,000•Hybrid

About The Position

As a Lead Security Engineer, you are an integral team member of our Information Security Engineering team, helping protect how our workforce, customers, and business partners access our environment. The role of Lead Security Engineer is to design, build, and maintain the identity, access, and endpoint security solutions that protect the organization while enabling the business. Working closely with fellow team members, including other Security Engineers, Network, Infrastructure, and Application teams, this role translates security requirements into technical solutions and helps guide the broader organization on security best practices. This role also mentors and teaches junior Security Engineers. The Lead Security Engineer works across the organization to ensure that systems, identities, and endpoints remain secure. This role provides guidance and oversight on identity and access management, privileged access, conditional access and multi-factor authentication, and endpoint detection and response for multiple enterprise applications. This role is a thought leader for the Information Security Engineering team, especially in areas such as identity governance and endpoint security, to deliver secure, reliable solutions in a cost-effective manner. You'll partner with Security, Network, Infrastructure, and Application teams to translate security requirements into technical solutions and guide best practices across the organization.

Requirements

Bachelor's degree or equivalent experience in Computer Science, Information Security, or related field
6+ years of experience in identity and access management, security engineering, and enterprise IT infrastructure
CISSP, CISM, or equivalent security certification preferred
Technical Competencies & Information Systems: Identity providers (e.g., Microsoft Entra ID, Okta), privileged access management platforms (e.g., CyberArk), endpoint detection & response tools (e.g., Microsoft Defender), Active Directory, SQL
Skills & Abilities:
7 to 10+ years of security engineering, identity & access management, or infrastructure security experience
Strong leadership and mentoring qualities
Oversee all aspects of identity, access, and endpoint security including establishing metrics, applying industry best practices, and developing new tools and processes to ensure security goals are met
Act as key point of contact for identity and endpoint security matters, providing security engineering services, and coordinating resources internally and externally
Lead and mentor other Security Engineers
Lead and review security configurations, scripts, plans, and procedures
Good knowledge of SDLC processes
Good knowledge of Agile methodology
Very good communication skills and able to lead others
Must have experience administering SSO/SAML federation and Conditional Access policies.
Experience working with privileged access management tooling (e.g., CyberArk)
Experience with endpoint detection & response tools (e.g., Microsoft Defender)
Understanding of Active Directory administration and identity governance
Basic knowledge of network security constructs (e.g., NSGs, firewalls, WAF)
Familiarity with automation tooling (e.g., Ansible) for provisioning and secret management
Ability to write SQL
Able to work independently across multiple teams
Must have experience using security and IT tools like JIRA and Confluence
Must have experience working with onsite offshore teams
Excellent English written and verbal communication skills
Should be able to lead security team members Onsite and Offshore.
Partner with multiple teams and provide high-quality security engineering services.
Should be able to work individually as well as in a team.
Experience with automation for identity and access provisioning
Experience with certificate and vulnerability management platforms
Experience with security monitoring/observability platforms (e.g., Splunk, Dynatrace).

Responsibilities

Work closely with multiple departments in the organization, focusing on company-wide initiatives as well as being the SME on identity, access management, and endpoint security. Own the design, configuration, and maintenance of SSO/federation, conditional access, and privileged access management solutions. Report to leadership on relevant statistics for area of expertise. Lead and guide offshore resources.
Design, configure, and troubleshoot SAML/SSO integrations for a large and growing portfolio of B2B customers, vendors, and internal applications (e.g., Microsoft Entra ID, Okta, ADFS, Ping, SecureAuth, Auth0), including certificate and signing-key rotation.
Build and tune Conditional Access Policies (e.g., geo-fencing, anonymous proxy/Tor/botnet blocking, MFA enforcement) and lead passwordless/Passkey rollouts for privileged account populations.
Drive Privileged Access Management (PAM) operations and migrations (e.g., CyberArk Privilege Cloud), onboard service accounts and secrets, and integrate PAM with cloud key vaults and automation platforms.
Oversee all aspects of area of expertise inside Information Security Engineering, including establishing metrics, applying industry best practices, and developing new tools and processes to ensure goals are met. Lead endpoint detection and response, identity governance, and security tooling initiatives, coordinating resources internally and externally.
Lead migrations from legacy AV/EDR tools to modern XDR platforms (e.g., Microsoft Defender suite), including automated response tuning and phishing simulation/security awareness programs.
Manage Active Directory/Entra ID hygiene, including service account ownership reviews, RBAC/access-role cleanup, security group governance, and privileged role alerting.
Coordinate NSG, firewall, and WAF rule changes with the Network team to support secure application and integration architectures.
Lead and mentor team members, as well as manage outside contract resources.
Provide technical leadership and mentorship to other security engineers, review designs, and help prioritize and estimate the team's engineering backlog.
Lead processes and create additional documentation and runbooks to optimize security operations.
Build and maintain Information Security Engineering documentation and runbooks (e.g., in Confluence) so processes are repeatable and auditable.
Manage SSO/certificate lifecycle for monitoring and observability tooling integrations (e.g., Splunk, Dynatrace, Zabbix).
Work independently with multiple teams, including Network and Infrastructure, as well as on multiple projects.