Sr.Security Engineer-Identity Security

At the Federal Home Loan Bank of Chicago, employees come first — we offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees.

Benefits

• Retirement program (401k and Pension)
• Medical, dental and vision insurance
• Lifestyle Spending Account
• Competitive PTO plan
• 11 paid holidays per year

Responsibilities

• Modernizes and secures workforce, privileged, and machine identity capabilities across the Bank.
• Reduces cyber and operational risk through ownership of critical identity security controls and remediation efforts.
• Drives delivery of strategic identity security initiatives while providing senior technical leadership and mentoring.
• Design, implement and operate security controls for various services in the Microsoft and Amazon cloud, with a primary focus in Azure AD.
• Design and implement access control policies within Azure AD.
• Occasionally provide support off-hours when business critical problems arise or to implement significant changes.
• Analyze requirements and apply knowledge of business needs and security risks to determine appropriate course of action.
• Collaborate with different areas of IT in order to provide security and business technology solutions for the Bank.
• Development of security policy, standard, procedure and design documents.
• Design, engineer, and deploy technologies for application integrations such as SAML and OIDC.
• Act as a point of escalation for issues relating to security controls or tools, including (but not limited to) SSO, MFA, certificates, and privileged access management tooling.
• Provide mentoring to junior staff in the Security Engineering and Security Operations teams.

Requirements

• 6-8 years of security or technology experience.
• 3+ years in IAM or other identity focused teams, with direct experience implementing PAM and SSO solutions.
• 4 year college degree in information technology or equivalent experience.
• Security and technology certifications are highly preferred (CISSP, SANS GSEC, MCSE/MCITP).
• Experience in a Windows Server Environment.
• Scripting/automation experience preferred.
• Experience or interest in working in an agile/scrum format.
• Outstanding communication (verbal, written, visualization and listening) skills.
• Self-starter who can work independently as well as in a team setting.
• Giving and receiving effective feedback across all interactions.
• Ability to address conflict with peers and others in the organization.
• Interest in understanding customer perspective to aid in development of the right solution.
• Commitment to delivering quality solutions.
• Ability to communicate technical topics to a non-technical audience.
• Interest in understanding business needs to aid in developing solutions that are right for the broader organization.
• Interest in working on a broad range of IT projects (Security, IaaS, Automation, Network, VoIP, Database).

Skills

• Knowledge of IT security controls and infrastructure
• Working knowledge of security principles and technology best practices
• Experience with Security Assessment and operations
• Cloud Fundamentals
• Monitoring and Logging
• Security, Identity & Compliance
• Security Consulting And Review
• Security Framework Design
• Security Stewardship and Governance
• Security Systems Engineering
• Security Training Development and Delivery
• Incident and Problem Management
• Infrastructure Monitoring, Event Management, and Operations
• IT Risk and Controls Assessment
• IT Risk Training Development and Delivery
• Technical Literacy
• Distributed Logging, Log Querying, and Log Analytics
• Secure Coding Practices

Pay

Salary Range: $90,400.00 - $150,700.00