Senior Cybersecurity Engineer

Russell Investments•New York, NY

1d•Hybrid

About The Position

At Russell Investments, our purpose is to improve financial security for people. We are seeking a Senior Cybersecurity Engineer – IAM & Endpoint Security to lead the design and engineering of identity, endpoint, and privileged access security capabilities across a global hybrid environment. This role combines hands-on engineering expertise with architectural alignment, focusing on scalable, automated, and risk-informed solutions grounded in Zero Trust principles.

Requirements

15+ years of experience in cybersecurity engineering.
Strong hands-on expertise in IAM, endpoint security, and privileged access management.
Experience in hybrid environments (on-premises and cloud).
Ability to translate architectural principles into practical engineering solutions.
Technical leadership and hands-on problem solving
Risk-based decision making
Collaboration across global teams
Clear and effective communication
Applicants must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Nice To Haves

Preferred Certifications: CISSP, CISM, or equivalent.
Identity and Access Management (authentication, authorization, federation, governance)
Privileged Access Management and least privilege enforcement
Endpoint security, hardening, and threat detection/response
Device management and endpoint compliance
Zero Trust architecture and identity-centric security models
Threat modeling and risk-based security practices
Automation/scripting for security operations
Familiarity with NIST, ISO, and CIS frameworks

Responsibilities

Lead the implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.
Own identity lifecycle management, endpoint security, and access governance, ensuring secure configurations and consistent enforcement of standards.
Drive automation and operational efficiency across provisioning, compliance, and access management processes.
Apply Zero Trust principles and threat modeling to strengthen identity and endpoint security design.
Partner with Cyber Operations to enhance detection, response, and control monitoring capabilities.
Conduct risk assessments and control validation, focusing on identity compromise and endpoint threats.
Collaborate with global teams and mentor engineers to promote consistent, scalable security practices.