Zero Trust Identity Policy Engineer / Security Analyst III

Role Summary/Purpose:
This role will provide critical engineering across authentication systems, to build advanced Adaptive/Zero Trust and CAEP policies that meet the requirements of the organization. This role will report into and take direction from the Authentication and Identity Security Platforms Leaders.
Essential Responsibilities:
* Evaluate, design, test, and implement adaptive access policies in multiple authentication platforms.
* Identify, build, and support integrations for adaptive and continuous access evaluation policies, aligning to principles of Zero Trust.
* Coordinate with platform owners, technical leads, and operations teams to ensure desired security, operational resiliency, and user experience outcomes.
* Apply technical knowledge, industry experience, subject matter expertise, and insights to contribute to the enhancement of Identity Security capabilities.
* Collaborate with various groups and individuals to troubleshoot and resolve escalated production issues.
* Perform other duties and/or special projects as assigned.

Qualifications/Requirements:
* BS/BA in Computer Science / other technical degree or Business Management and 7 years of IT experience or in lieu of degree High School Diploma/GED and 10 years of IT experience.
* 3+ years of experience engineering advanced authentication policies or similar cybersecurity engineering (ie: firewall, network, endpoint, etc.).
* 3+ years of experience with Multi-factor authentication solutions and platforms (ie: Okta, Microsoft Entra, Cisco Duo, etc.).
* Strong understanding of identity and access management principles and best practices in modern IdP's, directories, and authentication systems.
* Experience with secure architectures, security posture hardening, and attack frameworks, especially through the lens of identity.

Desired Characteristics:
* 5+ years of experience in an information security domain, with specialized subject matter expertise in Identity & Access Management, Infrastructure Security, or similar.
* 5+ years of experience working with security teams in large, highly-regulated enterprises.
* Experience with phishing-resistant/passwordless authentication solutions (ie: Okta FastPass, Beyond Identity, Hypr, etc.)
* Experience working within agile-driven product and operations teams.
* Hands-on experience working across various identity functions including Active Directory, Entra ID Administration, Authentication, Authorization, Directory Services, Privilege Management, and Secrets Management.
* Experience with Cloud technologies, including IaaS, PaaS, and SaaS; with an understanding of access security and risks.
* Proven analytical mindset; Ability to identify patterns or correlations within data sets
* Knowledge of Personally Identifiable Information (PII) data security standards
* Knowledge of Payment Card Industry (PCI) data security standards
* Knowledge of laws, policies, procedures, or governance relevant to cybersecurity for critical infrastructures
* Knowledge of cyber defense and information security policies, procedures, and regulations
* Knowledge of information technology (IT) risk management policies, requirements, and procedures
* Industry recognized certifications (ie: CASP, CISSP, CISM, Microsoft, Okta, etc.).