Platform Engineer - Security

The Campbell's Company; Camden (NJ); On-site; USD 134,000 - 184,000; Full time

Benefits offered by this job

Medical

Dental

Disability

AD&D

Life Insurance

401(k) matching

PTO & holidays

On-site fitness

Day care on-site

Company store

Volunteer/donation matching

ERGs

Job summary

The Campbell's Company seeks a Senior Security Engineer to join our Information Security team in Camden, NJ. You will manage IAM, PAM, and security tooling across Azure, AWS, and on‑prem environments, driving Zero Trust strategies and cloud identity modernization.

You will implement RBAC, user lifecycle processes, and automation, while partnering with Architecture and Risk teams to manage risk and improve security controls enterprise‑wide.

Qualifications

• Bachelor’s degree in computer science or information technology required.
• Minimum 6+ years in information security with IAM/PAM experience.
• Experience with Linux identity engineering and administration.
• Experience with privileged access management across Windows, Linux, network devices, and containers.
• Experience supporting IAM solutions (Saviynt, SailPoint) with integrations.
• Scripting: Python or PowerShell or API integrations.
• Knowledge of SSL, HTTP, DNS, SMTP, IPsec.
• Understanding of TCP/IP, networking, routing, and encryption.

Responsibilities

• Design, deploy, integrate, and support enterprise security tech including PAM, IAM, IGA.
• Develop and enhance IAM services, RBAC, and user lifecycle processes.
• Design and implement Zero Trust strategies for identity, devices, apps, and network access.
• Engineer and maintain PAM across Windows and Linux.
• Lead Active Directory hardening and identity security improvements.
• Drive transition to Microsoft Entra ID and cloud-native identity services.
• Develop automation to improve ops and security detection/response.
• Troubleshoot IAM issues with root-cause analysis and long-term fixes.
• Continuously assess and modernize security platforms to meet threats.
• Promote IAM and security best practices across the org.
• Stay current on threats and evaluate new technologies.
• Collaborate with Architecture and Risk teams to manage risk.

Skills

PAM

IAM

IGA

Zero Trust

Active Directory

Microsoft Entra ID

RBAC

Python

PowerShell

API integrations

TCP/IP

SSL/TLS

Cloud security

Linux administration

Saviynt

SailPoint

Education

Bachelor’s degree in computer science or information technology

Tools

Saviynt

SailPoint

Windows

Linux

Azure

AWS

Job description

Since 1869, we've connected people through food they love. We’re proud to be stewards of amazing brands that people trust. Our portfolio includes the iconic Campbell’s brand, as well as Cape Cod, Chunky, Goldfish, Kettle Brand, Lance, Late July, Pacific Foods, Pepperidge Farm, Prego, Pace, Rao’s Homemade, Snack Factory, Snyder’s of Hanover. Swanson, and V8.

Here, you will make a difference every day. You will be supported to build a rewarding career with opportunities to grow, innovate and inspire. Make history with us.

Why Campbell’s…

• Benefits begin on day one and include medical, dental, short and long‑term disability, AD&D, and life insurance (for individual, families, and domestic partners).
• Employees are eligible for our matching 401(k) plan and can enroll on the first day of employment with immediate vesting.
• Campbell’s offers unlimited sick time along with paid time off and holiday pay.
• If in WHQ – free access to the fitness center. Access to on‑site day care (operated by Bright Horizons) and company store.
• Giving back to the communities where our employees work and live is very important to Campbell’s. Our “Campbell’s Cares” program matches employee donations and/or volunteer activity up to $1,500 annually.
• Campbell’s has a variety of Employee Resource Groups (ERGs) to support employees.

How You Will Make History Here…

The Campbell's Company is looking for a senior level Security Engineer to join our critical and highly visible Information Security team. This position will primarily be responsible for managing the lifecycle and effectiveness of key security tools and processes. You will work closely with the Architecture and Risk Management teams to ensure that security controls are in place and appropriately managing risk throughout the Information Technology, Operational Technology, and Cloud environments.

What You Will Do…

• Design, deploy, integrate, and support enterprise security technologies, including Privileged Access Management (PAM), Identity and Access Management (IAM), Identity Governance and Administration (IGA) and cloud security solutions across Azure and AWS environments.
• Develop, implement, and enhance IAM services, governance workflows, role‑based access controls (RBAC), and user lifecycle management processes to strengthen security and operational efficiency.
• Design, test, and implement Zero Trust security strategies focused on identity, devices, applications, and network access.
• Engineer and maintain PAM solutions for Windows and Linux environments, ensuring secure privileged access across the enterprise.
• Lead Active Directory security hardening initiatives and identity security improvements.
• Drive the transition from on‑premises Active Directory to Microsoft Entra ID and cloud‑native identity services.
• Develop automation solutions to improve operational efficiency, administrative maintenance, and security detection and response capabilities.
• Troubleshoot and resolve complex security and IAM‑related issues through root cause analysis and implementation of long‑term corrective actions.
• Continuously assess, improve, and modernize security and identity platforms to address evolving threats, business requirements, and industry best practices.
• Promote IAM, PAM, and security best practices across the organization through training, consultation, and collaboration.
• Stay current on emerging cybersecurity threats, identity‑related risks, and industry trends, evaluating new technologies and processes that enhance enterprise security capabilities and assume other responsibilities as assigned.

Job Complexity

• Manage multiple, concurrent project and task assignments, placing proper priorities on tasks and attention to detail to follow through all assignments to completion
• Create and manage the lifecycle of documentation to support the architecture and operations of security systems
• Continuously improving operational playbooks and knowledge transfer material to enable operational support teams to handle increasingly complex tasks to enable Engineering time is focused on the most valuable work
• Serve as an incident escalation point
• Provide thought leadership and communications expertise in the development of policies, standards, procedures, and other communication for the department
• Provide thought leadership on key performance indicators for measuring success objectively
• Integrate existing and new tools and supporting resources into our security intelligence platform, with the goal of deriving actionable data
• Evaluate new technologies and processes that enhance security capabilities

What You Bring To The Table… (Must Have)

• Bachelor’s degree in computer science or information technology discipline
• 6+ years of relevant work experience, including:
• 2 years of experience as an Information Security Analyst with experience within at least two of the following disciplines: firewall management, system hardening, identity and access management, identity governance, or privileged access management
• Deep understanding of Linux identity engineering and administration - must have Linux on resume
• 1 year of experience working with privileged access management platforms across Windows, Linux, network device, and containerized platforms
• 2 years of experience supporting IAM solutions (e.g., Saviynt, Sailpoint, etc.) and integrations with upstream and downstream applications.
• Significant experience working with automation scripting leveraging at least 2 of the following: python, PowerShell, API based integrations, and no/low‑code workflow automation platforms.
• Strong knowledge of L4-L7 protocols such as SSL, HTTP, DNS, SMTP, and IPsec
• Deep understanding of TCP/IP, computer networking, routing, and switching, and encryption technologies and standards
• Knowledge of identity and access management and identity governance and administration principles (SSO, MFA, ModernAuth, SoD, Least Privilege, Access Certifications)

If would be great if you have… (Nice to Have)

• CISSP and Identity Management Institute certification is a plus.
• Cloud Security experience is a plus
• Conceptual understanding of the Cyber Kill Chain and MITRE ATT&CK framework
• JSON development
• Experience with leveraging LLM’s or statistical analysis to drive operational insights
• Experience with Manufacturing environments is a plus.
• Strong security policy knowledge and experience.
• Strong ability to clearly communicate and document complex concepts
• Experience with data protection tools and processes – Data Loss Prevention (DLP), Rights Management Services (RMS), Cloud Access Security Broker (CASB)

Compensation And Benefits

The target base salary range for this full‑time, salaried position is between $133,800-$184,000.

Individual base pay depends on work location and additional factors such as experience, job‑related skills, and relevant education or training. Total pay may include other forms of compensation. In addition, we offer competitive health, dental, 401k and wellness benefits beginning on the first day of employment. Please ask your Talent Acquisition Partner for more information about our total rewards package.

The Company is committed to providing equal opportunity for employees and qualified applicants in all aspects of the employment relationship, including consideration for employment, without regard to race, color, sex, sexual orientation, gender identity, national origin, citizenship, marital status, protected veteran status, disability, age, religion, or any other classification protected by law.