Sr. Security Engineer – IAM DevSecOps-

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Themesoft Inc., so some details may not match this job. The employer's own page has the real description.

Job Overview

As a Senior Security Engineer specializing in Identity and Access Management (IAM) within a DevSecOps framework, you will be responsible for enhancing and securing the design and implementation of IAM solutions at Themesoft Inc. This role demands a proactive approach to identify and mitigate security risks associated with IAM systems, along with collaboration with cross-functional teams to ensure security protocols are integrated throughout the development lifecycle. You will lead efforts in developing security best practices and automate security monitoring to foster a compliant and secure environment.

Job Responsibilities

• Design, implement, and manage IAM solutions to ensure secure and efficient access control.
• Conduct risk assessments and security audits of IAM processes, identifying potential vulnerabilities.
• Collaborate with development teams to integrate security practices within the CI/CD pipeline.
• Develop and maintain IAM policies, standards, and procedures.
• Provide expert guidance on best practices for identity governance and administration.
• Monitor IAM systems for security incidents and respond to alerts as necessary.
• Stay abreast of industry trends and emerging threats related to IAM and make recommendations for improvements.
• Train and mentor junior security engineers and stakeholders on IAM security practices.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in security engineering, with a focus on IAM solutions.
• Proficiency in IAM technologies such as Active Directory, LDAP, SAML, OAuth, and OpenID Connect.
• Strong knowledge of DevSecOps concepts and tools.
• Experience with security frameworks and compliance regulations (e.g., NIST, ISO 27001, GDPR).
• Certifications such as CISSP, CISM, or similar are highly desirable.
• Strong analytical, problem-solving, and communication skills.

Technologies & Tools

The Senior Security Engineer will work with a variety of technologies and tools, including IAM solutions such as Okta and Azure AD, access management tools, CI/CD platforms like Jenkins and GitHub Actions, security monitoring solutions, and compliance frameworks. Familiarity with scripting languages like Python or PowerShell for automation is also required.

Ideal Candidates

The ideal candidate for this position will exhibit strong leadership qualities and a commitment to fostering a culture of security within the organization. They should possess a strategic mindset, capable of aligning security initiatives with business objectives. Excellent communication and interpersonal skills are essential, enabling effective collaboration with diverse teams. A proactive attitude towards continuous improvement and a passion for staying ahead of the evolving threat landscape will also significantly contribute to their success in this role.