Information Security Engineer

Westfield Insurance; Westfield Center (OH); Hybrid; USD 70,000 - 90,000; Full time

Job summary

A leading insurance provider is seeking an Information Security Engineer to manage identity and access functions. This position focuses on IAM and SSO, integrating applications, troubleshooting access issues, and enhancing security protocols. Candidates should have up to 5 years of experience and a relevant degree in Computer Science or IT. The role supports hybrid work with multiple office visits per week, providing opportunities for impact on security processes across the organization.

Qualifications

• 0-5 years of experience in Information Security or a related field.
• Bachelor's degree in Computer Science, Information Technology or a related field and/or commensurate experience.

Responsibilities

• Operate and enhance enterprise IAM and SSO platforms.
• Integrate applications using SAML, OAuth, OIDC.
• Troubleshoot user-to-system access issues.
• Support secure authentication patterns including MFA and RBAC.
• Partner with app teams to onboard new applications into SSO.

Skills

Security Engineering

Firewall Management

Identity Management

Incident Response

Network Security

Education

Bachelor's degree in Computer Science, Information Technology or related field

Job description

Job Summary

At Westfield, we’re modernizing identity at scale. We’re looking for an Information Security Engineer with a strong focus on Identity & Access Management (IAM) and Single Sign-On (SSO) to help design, operate, and mature our enterprise authentication and federation capabilities.

This role sits at the intersection of security engineering, identity platforms, and application integration, partnering closely with application teams, infrastructure, and security stakeholders to deliver secure, scalable access across the enterprise.

As part of our Information Security Engineering team, you will:

• Operate and enhance enterprise IAM and SSO platforms, supporting both internally developed and third-party applications
• Integrate applications using modern authentication and federation standards (SAML, OAuth, OIDC)
• Troubleshoot and remediate user-to-system and system-to-system access issues across web and cloud environments
• Support secure authentication and access control patterns, including MFA, RBAC, and privileged access use cases
• Partner with application teams to onboard new applications into SSO using established design patterns and standards
• Perform routine platform maintenance, upgrades, and configuration changes following change management best practices
• Monitor identity-related security events and support incident response activities when access-related issues arise
• Provide technical guidance to application and infrastructure teams on secure identity integration and access design
• Contribute to security standards, procedures, and documentation related to identity, access, and authentication

Job Qualifications

• 0-5 years of experience in Information Security or a related field.
• Bachelor's degree in Computer Science, Information Technology or a related field and/or commensurate experience.

Location

• Hybrid defined as three (3) or more days per week in the office.

Behavioral Competencies

• Certified Information Systems Security Professional
• Collaborates
• Customer focus
• Communicates effectively
• Decision quality
• Nimble learning

Technical Skills

• Security Engineering
• Firewall Management
• Threat Intelligence
• Network Security
• Incident Response
• Security Monitoring
• Vulnerability Management
• Identity Management
• Encryption Techniques
• Security Assessments
• Information Security

This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.