New

Senior Security Engineer - IAM

Blue Cross Blue Shield Association
vision insurance, 401(k)
United States, Illinois, Chicago
Apr 15, 2025
The hiring range for this role is: $107,666.00 - $160,000.00 This is the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the hiring range and this hiring range may also be modified in the future. A candidate's position within the hiring range may be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, relevant experience, skills, seniority, performance, shift, travel requirements, and business or organizational needs.This job is also eligible for annual bonus incentive pay. We offer a comprehensive package of benefits including paid time off, 11 holidays, medical/dental/vision insurance, generous 401(k) matching, lifestyle spending account and many other benefits to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law. Job Description Summary As a Senior Security Engineer, you will collaborate with Architects and key stakeholders to interpret and implement engineering and operational guidance within a specific security domain or program. You will contribute to multiple projects, leading the creation of comprehensive roadmaps for various projects or departments. Your role will involve championing operational excellence by designing and executing advanced process improvement initiatives. You will drive significant cost optimization efforts by identifying and implementing strategic savings opportunities. Additionally, you will enhance security risk visibility by developing and overseeing robust risk management frameworks. You will also participate in domain-related incident response efforts as needed, maintain defined security architecture, and manage domain-specific security tools. Responsibilities include but are not limited to: Works with Architects and key stakeholders to interpret engineering and operational guidance in a specific security domain/program and contributes to multiple projects related to it. Lead the creation of comprehensive roadmaps for multiple projects or departments. Champion operational excellence by designing and executing process improvement initiatives. Drive significant cost optimization efforts by identifying and implementing strategic savings opportunities. Enhance security risk visibility by developing and overseeing robust risk management frameworks. Participate in domain related incident response efforts as needed, maintain defined security architecture, and manage domain specific security tools. Required Education, Certifications and Experience Education Required: Bachelor's degree in Computer Science, Information Security, or related field or equivalent work experience. Experience Required: 7+ years of cyber security experience General: Experience implementing risk remediation prioritization and collaboration with key stakeholders to understand risk drivers and remediation blockers. Experience monitoring and tracking remediation efforts, staying abreast of emerging threats, and leading the design, implementation, and maintenance of domain specific toolsets. IAM (Identity and Access Management) Domain Role: Relevant engineering experience, preferably in hybrid cloud environments leveraging DevOps and other automation models to drive IAM program maturity. Experience in designing and deploying identity-focused workflows, and functions in enterprise environments. Experience with Active Directory, LDAP (Light-weight Directory Access Protocol), IGA (Identity Governance and Administration), PAM (Privileged Access Management), EIAM (Enterprise Identity Access Managment), SSO (Single Sign-On, MFA (Multi-factor Authentication), federation/SAML (Security Assertion Markup Language) or equivalent. Experience with SailPoint Identity Security Cloud IAM automation and other software automation and orchestration tools including provisioning, configuration management, application-deployment, network segmentation and monitoring, server monitoring and visualization. Certifications Preferred: CISSP Knowledge, Skills, and Abilities Ability to plan, develop, implement, and update company's information security strategy. Excellent communication skills Excellent presentation skills that cater to technical and non-technical audiences. Strong analytical and problem-solving skills and ability to manage multiple projects successfully, ensuring timely and budget-friendly completion. Strong interpersonal skills, and the ability to influence and solve problems effectively. Solid understanding of HIPAA/HITRUST requirements, cloud-first security practices, and various security tools and technologies. Financial Responsibilities Revenue Responsibility: No Budget Responsibility: No People Management: No