Cyber Security Principal

Federal Express Corporation; Coraopolis (Allegheny County); Híbrido; USD 111 000 - 250 000; Tempo integral

Resumo da oferta

Federal Express Corporation is seeking a seasoned Cyber Security Principal to lead the enterprise identity security architecture focused on AD DS, OUD LDAP, and Microsoft Entra ID with PKI support. You will drive security hardening, governance, and disaster recovery planning for the identity tier in hybrid on-prem/cloud environments.

Ideal candidates bring 5+ years in IT security, deep AD/OUD/Entra expertise, and strong leadership to mentor teams while shaping security posture KPIs across

Qualificações

• Bachelor's degree in a relevant field or equivalent training.
• Minimum 5 years in IT security with enterprise identity focus.
• Deep expertise in AD DS, OUD, Entra ID, and PKI implementation.
• Strong foundation in security governance, risk, and architecture.

Responsabilidades

• Define and enforce target-state directory architecture and baselines.
• Lead AD/LDAP hardening, trusts, GPOs, and Kerberos security.
• Architect and secure OUD deployments and multi-master topologies.
• Govern Entra ID configurations, CA, and hybrid synchronization.
• Document DR runbooks and ensure rapid recovery from incidents.
• Provide SME guidance and mentor staff on identity security.

Conhecimentos

Active Directory Architecture

OUD LDAP

Microsoft Entra ID

PKI & Certificate Services

Security Architecture

Formação académica

Bachelor's degree

Ferramentas

PowerShell

Ansible

SailPoint IdentityIQ

Okta / Identity Providers

CrowdStrike IDP

Descrição da oferta de emprego

We are seeking a seasoned and strategic Cyber Security Principal to serve as the enterprise technical authority for our Enterprise Directory and Certificate Services ecosystem. In this role, you will lead the strategic architecture, security hardening, governance, and operational resilience of our mission-critical identity tier-focusing exclusively on Active Directory Domain Services (AD DS), Oracle Unified Directory (OUD) LDAP, and Microsoft Entra ID (Azure AD), along with enterprise Public Key Infrastructure (PKI) / Certificate Services.

Essential Functions

• Enterprise Directory Architecture & Governance: Define, maintain, and enforce target-state architecture, security baselines, and configuration standards across on-premises and cloud directory environments (AD DS, OUD LDAP, and Microsoft Entra ID).
• Active Directory & Protocol Hardening: Lead security engineering for domain controllers, schema governance, trust relationships, Group Policy, and authentication protocol security.
• Enterprise OUD LDAP Engineering: Architect, tune, and secure enterprise Oracle Unified Directory deployments, including multi-master replication topologies, access control instructions (ACIs), schema extensions, and high-throughput LDAP integrations.
• Hybrid Identity & Entra ID Security: Design and govern Entra ID tenant configurations, Conditional Access policies, hybrid directory synchronization (Entra Connect), and Privileged Identity Management (PIM).
• Identity Resilience & Cyber Disaster Recovery: Architect, document, and routinely validate comprehensive forest recovery and disaster recovery runbooks for AD and OUD, ensuring rapid recovery against ransomware and catastrophic failure.
• Technical Leadership & Strategy: Provide SME guidance on identity security architecture across enterprise projects, mentor directory engineering staff, and establish security posture KPIs/KRIs for leadership.

Required Qualifications & Technical Competencies

Core Technical Mastery

• Active Directory Domain Services (AD DS):
• Expert-level knowledge of multi-forest/multi-domain topologies, trusts, Kerberos (constrained/unconstrained delegation, PKINIT), DNS, and replication mechanics.
• In-depth expertise in AD hardening/security techniques and attack path reduction.
• Oracle Unified Directory (OUD):
• Advanced design, administration, performance tuning, and replication architecture of OUD LDAP services.
• Deep understanding of LDAP RFCs, search filter indexing, backend database partitions, and directory proxy architectures.
• Microsoft Entra ID (Azure AD):
• Comprehensive expertise in Entra ID architecture, App Registrations, Service Principals, Entra Connect/Cloud Sync, Conditional Access, and hybrid tenant security.

Preferred / Bonus Qualifications

• Automation & Infrastructure-as-Code (Strongly Preferred):
• PowerShell: Advanced scripting and module development for Active Directory administration, reporting, remediation, and API interactions (Microsoft.Graph, ActiveDirectory module).
• Ansible: Proven experience developing and maintaining Ansible playbooks for automated provisioning, configuration management, security baseline enforcement, and deployment of directory infrastructure.
• Identity Governance & Administration (IGA): Familiarity with directory integrations into enterprise IGA platforms (e.g., SailPoint IdentityIQ / Identity Security Cloud).
• Identity Providers and Security: Familiarity with Identity Providers (e.g. Okta) and Identity Protection modules (e Crowdstrike IDP).

Leadership & Professional Competencies

• Proven ability to drive consensus and influence architectural standards across security, infrastructure, and application engineering teams.
• Strong communication skills with the ability to convey identity risks and cryptographic concepts clearly to executive stakeholders.
• Experience leading technical response and post-incident hardening during critical Tier-0 / identity security incidents.

Minimum Education

Bachelor's degree/Equivalent in computer science, information systems and/or equivalent formal training.

Minimum Experience

Five (5+) years of experience in IT information security.

Knowledge, Skills, and Abilities

Skills include IT security and infrastructure.

Strong technical and consulting skills, project management capability.

Experience with security and risk frameworks, standards and best practices.

Strong communication skill.

Compensation

US: $9,208.38/mo - $20,872.33/mo, CO: $9,208.38/mo - $20,002.65/mo, MD: $9,719.96/mo - $20,872.33/mo, NY: $9,719.96/mo - $20,872.33/mo, NYC: $11,766.26/mo - $20,872.33/mo, WA: $9,719.96/mo - $20,872.33/mo

Domicile

This is a hybrid position located in Pittsburgh, PA, Memphis, TN, or Plano TX. Candidates must live within 50 miles of the campus location. Employees will be required to work at the FedEx campus location several times per week.

Pay Transparency

The compensation listed reflects the pay range or rate of pay reasonably expected for this posted position at the posted location or locations. If this opportunity includes multiple job levels, the pay information represents the ranges for each level in that job family. Actual pay is determined by several job-related factors permitted by law and relevant to the position, including, but not limited to, experience relative to the job, tenure, market level, pay at the location for this job, performance, schedule, and work assignment. In California, the compensation listed reflects the range or rate of pay reasonably expected for this posted position upon hire. In New Jersey, any compensable Security and Walk time will be paid to non-exempt/hourly employees at the state minimum wage.

Federal Express Corporation is an Equal Opportunity Employer including, Vets/Disability.

Reasonable accommodations are available for qualified individuals with disabilities throughout the application process. Applicants who require reasonable accommodations in the application or hiring process should contact [e-mail].

Applicants have rights under Federal Employment Laws

• Know Your Rights
• Pay Transparency
• Family and Medical Leave Act (FMLA)
• Employee Polygraph Protection Act

E-Verify Program Participant: Federal Express Corporation participates in the Department of Homeland Security U.S. Citizenship and Immigration Services' E-Verify program (For U.S. applicants and employees only). Please click below to learn more about the E-Verify program:

• E-Verify Notice (bilingual)
• Right to Work Notice (English) / (Spanish)