Sr Principal DT Security Engineer - 90343213 - Remote

Amtrak

2d•$149,400 - $193,644•Remote

About The Position

Leads the development and evolution of enterprise cybersecurity capabilities by shaping security strategy, advancing cyber defense architectures, and addressing emerging threats across the organization. This role requires a highly experienced technical leader who can serve as the organization's subject matter expert on Identity and Access Management (IAM) while driving the strategy, architecture, and delivery of enterprise authentication services. The Sr. Principal Systems Engineer is responsible for providing technical leadership and architectural guidance across Active Directory, Microsoft Entra ID, Privileged Access Management (PAM), Certificate Management and related identity technologies in a large, complex enterprise environment. Acting as a trusted advisor to both technology and business leadership, this individual leads the planning and execution of strategic initiatives, evaluates emerging technologies, develops long-term roadmaps, and influences enterprise architecture decisions both within and beyond the IAM domain.

Requirements

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
Plus 9 years of relevant work experience.
Experience focused on Identity and Access Management (IAM), authentication services, directory services, and access security technologies.
Extensive hands-on experience designing, implementing, and supporting enterprise identity platforms, including Microsoft Active Directory, Microsoft Entra ID (Azure AD), federation services, authentication protocols, and identity lifecycle management.
Demonstrated experience leading Privileged Access Management (PAM) programs and technologies, including privileged account governance, credential management, privileged session controls, and least-privilege security principles.
Proven experience serving as a technical lead or principal engineer in large, complex enterprise environments, providing architecture guidance, project leadership, and technical mentorship across multiple teams and disciplines.
Strong experience developing technology roadmaps, leading strategic initiatives, and consulting with executive and senior leadership, with the ability to translate business objectives into secure and scalable technical solutions.
Excellent customer service, communication, and interpersonal skills essential for collaborative teamwork and self-motivation.
Proficiency in identifying and implementing security measures, including understanding adversary tactics and tools.
Experience managing a diverse security ecosystem encompassing SIEM/SOAR, EDR/AV, CASB, IDS/IPS, DLP, UEBA, FW, IAM/SSO technologies.
Demonstrated ability to influence strategy and solve highly complex, ambiguous security challenges with broad organizational impact.
Proven ability to lead large, multi-disciplinary initiatives and influence stakeholders across the organization without direct authority.

Nice To Haves

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
Plus 11 years of relevant work experience.
Industry certifications such as CISSP, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, CyberArk Defender/Sentry, or equivalent.
Experience supporting regulatory and compliance frameworks such as PCI DSS, NIST, SOX, ISO 27001, or similar.
Experience with hybrid identity architectures, cloud security, Zero Trust initiatives, Conditional Access Policies, MFA, and Identity Governance and Administration (IGA) solutions.

Responsibilities

Serve as the senior technical authority and subject matter expert (SME) for Identity and Access Management (IAM) services, providing strategic direction and technical leadership across the organization.
Lead the architecture, design, implementation, and continuous improvement of enterprise authentication and identity platforms, including Active Directory, Microsoft Entra ID, and related identity technologies.
Develop and maintain technology roadmaps, ensuring alignment with organizational objectives, security requirements, compliance mandates, and future business needs.
Assists and/or may lead in the development and analysis of source selection strategies.
Provide architectural guidance and governance for enterprise initiatives, evaluating proposed solutions and ensuring adherence to IAM standards, security principles, and best practices.
Lead the planning and execution of complex projects and programs, including resource planning, prioritization, risk management, and stakeholder engagement.
Drive the strategy, implementation, and optimization of Privileged Access Management (PAM) solutions to strengthen security, reduce risk, and support regulatory compliance.
Serve as the subject matter expert for Certificate Lifecycle Management (CLM), providing technical leadership for enterprise PKI, digital certificates, and certificate automation.
Establish and enforce technical standards, policies, and operational procedures for identity lifecycle management, authentication services, privileged access, and directory services.
Provide end-to-end operational support for enterprise identity infrastructure, including monitoring, maintenance, incident response, and continuous improvement to ensure reliability, availability, performance, and security.
Collaborate with cross-functional teams to evaluate emerging technologies, assess risks, and influence strategic technology decisions across the enterprise.
Lead root cause analysis and resolution efforts for complex identity, authentication, authorization, and access-related issues, driving long-term corrective actions.