Senior Cybersecurity Engineer II – Identity & Access Management (IAM)

Walgreens • Deerfield, IL

1d • Hybrid

About The Position

The Senior Cybersecurity Engineer II – Identity & Access Management (IAM) is a senior technical individual contributor in the Information Security organization. The role designs, engineers, and continuously improves enterprise identity security capabilities that protect the organization while enabling a seamless user experience. It partners with infrastructure, application, cloud, architecture, and security teams to deliver scalable, secure, and resilient identity solutions across a complex enterprise environment.

The position calls for a security practitioner with deep IAM expertise and a broad understanding of enterprise technology, including cloud platforms, operating systems, networking, application architecture, automation, and cybersecurity principles. The engineer evaluates existing practices, identifies improvements, leads technical initiatives, contributes to strategic direction, and remains hands-on with solution design, implementation, troubleshooting, and operational improvements. The role emphasizes engineering, automation, modern security design patterns, and measurable improvements to security posture, operational efficiency, and user experience.

The position is based in Deerfield, Illinois, with a hybrid schedule of four days onsite and one day remote per week. Applicants must be legally authorized to work in the United States; Walgreens will not provide employment-based visa sponsorship now or in the future. Travel of up to 10% may be required for business purposes, within or outside the state.

Requirements

• Bachelor’s degree and at least 4 years of IT Security experience, or a high school diploma/GED and at least 7 years of IT Security experience.
• At least 2 years of experience with security protocols and standards, vulnerability assessment tools, packet analyzers, scripting languages, security management suites, penetration testing tools, and web application countermeasures and mitigation techniques.
• Experience in security engineering, identity engineering, security applications engineering, and/or security infrastructure engineering.
• Experience establishing and maintaining relationships with people at all organizational levels, in the business community, and with vendors.
• Experience with modern scripting languages and applicable application protocols and APIs.
• At least 2 years of experience contributing to financial decisions in the workplace.
• At least 2 years of direct leadership, indirect leadership, and/or cross-functional team leadership.
• Willingness to travel up to 10% of the time for business purposes, within the state and out of state.
• Demonstrated ability to modernize IAM programs beyond directory management and provisioning, emphasizing measurable security outcomes, automation, scalability, and user experience.
• Experience establishing or maturing identity security capabilities involving non-human identities, service accounts, workload identities, secrets management, machine authentication, certificate-based trust models, or other emerging identity domains.
• Strong understanding of Zero Trust, phishing-resistant authentication, adaptive access controls, least privilege, risk-based authorization, and identity threat detection.
• Ability to balance security requirements with workforce productivity and customer experience.
• Experience contributing to long-term identity security strategies, evaluating emerging technologies, challenging legacy approaches, and influencing modernization roadmaps in large, complex enterprises.
• Hands-on experience with one or more enterprise identity management, identity governance, privileged access management, or authentication platforms, such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, ForgeRock, Duo, or similar technologies.
• Familiarity with identity standards and protocols such as SAML, OAuth, OpenID Connect (OIDC), SCIM, FIDO2, WebAuthn, and certificate-based authentication.
• Strong security engineering background and ability to assess threats, identify systemic weaknesses, and design sustainable controls that improve organizational resilience.
• Demonstrated experience challenging established practices, simplifying legacy processes, and leading identity modernization initiatives that improve security, operational efficiency, automation, or user experience.

Nice To Haves

• Bachelor’s degree in computer science, Information Technology, Engineering, or Mathematics.
• Experience analyzing and reporting data to identify issues, trends, or exceptions, drive improvements, and find solutions.
• Experience identifying operational issues and recommending and implementing strategies to resolve problems.
• CISSP or CISA certification.
• Interest in emerging identity security challenges, including workload identities, machine-to-machine trust, identity automation, agentic AI and AI-related identity controls, authorization modernization, and evolving enterprise identity architectures.

Responsibilities

• Configure, document, and maintain elements of the organization’s information security architecture.
• Lead the design, development, operation, and automation of information security solutions and processes that protect the organization’s digital network, systems, applications, and data.
• Consult with internal development teams to identify threats, advise on defensive coding strategies, and remediate software vulnerabilities.
• Work with internal business partners and customers to define information security requirements and conduct risk assessments.
• Provide technical leadership on security projects and help solve challenging security problems.
• Participate in security risk analyses and reviews of third-party software, service providers, and contracts.
• Stay current on evolving security and legislative or regulatory changes related to security.
• Proactively assess risks and vulnerabilities in networks and systems.
• Contribute to technical and business approaches and to new or enhanced technical tools.
• Minimize threats and vulnerabilities affecting business systems and applications, including in-house and cloud-based systems.
• Install and configure firewalls, intrusion detection systems, antivirus software, and vulnerability scanning systems.
• Manage encryption protocols and authentication and access controls.
• Evaluate security configurations following intrusions and monitor the effectiveness of resulting changes.
• Monitor compliance with security standards and conduct periodic security audits, including ethical hacking and penetration testing.
• Conduct network security audits and testing, and evaluate system security configurations for effectiveness and compliance with policies and procedures.
• Design and implement identity security capabilities across hybrid enterprise environments, including authentication, authorization, privileged access, identity governance, federation, and cloud-native identity services.
• Advance IAM through automation, orchestration, policy-driven controls, infrastructure as code, API-driven integrations, and engineering-led approaches.
• Contribute to identity security strategy and modernization initiatives, evaluating emerging technologies and influencing modernization roadmaps.
• Partner with engineering, infrastructure, cloud, platform, application, and security teams to integrate identity controls into enterprise solutions.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior