Senior Cybersecurity Engineer II – Identity & Access Management (IAM)
About The Position
The Senior Cybersecurity Engineer – Identity and Access Management (IAM) is a senior technical contributor in the Information Security organization, responsible for designing, engineering, and continuously improving enterprise identity security capabilities. The role partners with infrastructure, application, cloud, architecture, and security teams to deliver scalable, secure, and resilient identity solutions across a complex enterprise environment. It calls for a security practitioner with deep IAM expertise and broad knowledge of enterprise technology, including cloud platforms, operating systems, networking, application architecture, automation, and cybersecurity principles. As a senior individual contributor, the engineer is expected to work independently, take technical ownership, lead technical initiatives, contribute to strategic direction, and remain hands-on with solution design, implementation, troubleshooting, and operational improvements. The role emphasizes thoughtful engineering, automation, modern security design patterns, continuous learning, and collaboration in Agile environments, with the goal of strengthening security posture, operational efficiency, and user experience. The position is based in Deerfield, Illinois, with a hybrid schedule of four days onsite per week and one day remote. Applicants must be legally authorized to work in the United States; Walgreens will not provide employment-based visa sponsorship for this position.
Requirements
- Bachelor’s degree and at least 4 years of experience in IT Security, or a High School Diploma/GED and at least 7 years of experience in IT Security.
- At least 2 years of experience with security protocols and standards, vulnerability assessment tools, packet analyzers, scripting languages, security management suites, penetration testing tools, and countermeasures and mitigation techniques applied to web applications.
- Experience in security engineering, identity engineering, security applications engineering, and/or security infrastructure engineering.
- Experience establishing and maintaining relationships with individuals at all levels of an organization, in the business community, and with vendors.
- Experience with modern scripting languages and applicable application protocols and APIs.
- At least 2 years of experience contributing to financial decisions in the workplace.
- At least 2 years of direct leadership, indirect leadership, and/or cross-functional team leadership.
- Willingness to travel up to 10% of the time for business purposes.
- Legally authorized to work in the United States; employment-based visa sponsorship is not available.
Nice To Haves
- Bachelor’s degree in computer science, Information Technology, Engineering, or Mathematics.
- Experience analyzing and reporting data to identify issues, trends, or exceptions, drive improvement, and find solutions.
- Experience identifying operational issues and recommending and implementing strategies to resolve problems.
- CISSP or CISA certification.
- Ability to modernize IAM programs beyond traditional directory management and provisioning, emphasizing measurable security outcomes, automation, scalability, and user experience.
- Experience designing and implementing identity security capabilities in hybrid enterprise environments, including authentication, authorization, privileged access, identity governance, federation, and cloud-native identity services.
- Success reducing manual operational processes through automation, orchestration, policy-driven controls, infrastructure as code, API-driven integrations, and engineering-first approaches.
- Experience with non-human identities, service accounts, workload identities, secrets management, machine authentication, certificate-based trust, or other emerging identity domains.
- Understanding of Zero Trust, phishing-resistant authentication, adaptive access controls, least privilege, risk-based authorization, and identity threat detection.
- Ability to balance security requirements with workforce productivity and customer experience.
- Experience contributing to long-term identity security strategies, evaluating emerging technologies, challenging legacy approaches, and influencing modernization roadmaps in large, complex enterprises.
- Hands-on experience with enterprise identity management, identity governance, privileged access management, or authentication platforms such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, ForgeRock, Duo, or similar technologies.
- Familiarity with SAML, OAuth, OpenID Connect (OIDC), SCIM, FIDO2, WebAuthn, and certificate-based authentication.
- Experience partnering with engineering, infrastructure, cloud, platform, application, and security teams to integrate identity controls into enterprise technology solutions.
- Strong security engineering background, including assessing threats, identifying systemic weaknesses, and designing sustainable security controls.
- Interest in emerging identity security challenges, including workload identities, machine-to-machine trust, identity automation, agentic AI and AI-related identity controls, authorization modernization, and evolving enterprise identity architectures.
- Experience challenging established practices, simplifying legacy processes, and leading identity modernization initiatives that improve security, operational efficiency, automation, or user experience.
Responsibilities
- Configure, document, and maintain aspects of the organization’s information security architecture.
- Design, build, operate, and automate information security solutions and processes that protect the integrity of the organization’s digital network, systems, applications, and data.
- Consult with internal development teams to identify threats, advise on defensive coding strategies, and remediate software vulnerabilities.
- Work with internal business partners and customers to develop information security requirements and conduct risk assessments.
- Provide technical leadership on security projects to solve challenging security problems.
- Participate in security risk analyses and reviews of third-party software, service providers, and contracts.
- Stay current on evolving security and legislative or regulatory changes related to security.
- Proactively assess potential risks and vulnerabilities in the network and systems.
- Contribute to technical and business approaches and the development or enhancement of technical tools.
- Apply knowledge of security protocols and standards, vulnerability assessment tools, packet analyzers, security management suites, penetration testing tools, and web application countermeasures and mitigation techniques.
- Help minimize threats and vulnerabilities to business systems and applications, including in-house and cloud-based systems.
- Install and configure firewalls, intrusion detection systems, antivirus software, and vulnerability scanning systems.
- Manage encryption protocols and authentication and access controls.
- Evaluate information security configurations following intrusions and monitor the effectiveness of implemented changes.
- Monitor compliance with security standards and conduct periodic security audits using techniques such as ethical hacking and penetration testing.
- Perform network security audits and testing, and evaluate system security configurations for effectiveness and compliance with policies and procedures.
- Travel up to 10% of the time for business purposes, within and outside the state.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
