Principal Cyber Security Engineer - SSO/IAM (Remote)

First Citizens Bank; Raleigh (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

First Citizens Bank is seeking a Security Engineer to lead daily security engineering, operations, analysis, and protection of the bank’s information assets. This remote role can be hired in NC, AZ, and TX and involves mentoring associates, coordinating security initiatives, and driving risk mitigation across networks and systems.

Responsibilities include incident investigation, playbook creation, and collaboration with management to strengthen defenses.

Qualifications

• Minimum education: Bachelor’s degree with 8+ years of experience or HS diploma with 12+ years in Systems Engineering, Network, or Info Security.
• Experience leading security assessments, risk mitigation, and incident response.
• Strong scripting and automation experience; IAM/SSO platforms knowledge required.

Responsibilities

• Security Engineering – lead security assessments and risk mitigation; ensure compliance with standards and best practices.
• Technical Expertise – advise management on security protocols; mentor associates.
• Issue Resolution – investigate incidents, prepare reports, create timely playbooks and documentation.
• Analysis – identify threats and vulnerabilities; compile data from multiple sources; generate actionable insights.
• Business Strategy – assist leadership in security policy development and strategy alignment.

Skills

Security tools

Python/PowerShell

Cryptography

Risk management

Communicate risks

After-hours support

Education

Bachelor's degree +8 years

High school diploma +12 years

Tools

Okta

Ping

Terraform

Okta Workflows

Job description

Overview This is a remote role that can be hired in NC, AZ, and TX.

Overview

This is a remote role that can be hired in NC, AZ, and TX. This position leads daily engineering, operations, analysis, management, and administration of tools, systems, or processes that secure the Bank's information assets and technology infrastructure. Assesses organizational networks, applications, or systems for potential vulnerabilities. Designs and implements technical solutions that strengthen security. Serves as a technical resource to management, associates, and business teams. Acts as a mentor and leader to less experienced associates in the work group.

Responsibilities & Qualifications

Duties & Responsibilities

Security Engineering - Researches and executes process or system improvements that enhance the Bank’s information security. Leads security assessments, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary standards, regulations or best practices. Oversees security projects and associate teams as assigned.

Technical Expertise - Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank’s information systems and resources. Advises management on security protocols and incidents. Mentors and trains associates to ensure team knowledge and effectiveness.

Issue Resolution - Leads the investigation and resolution of incidents. Prepares, reviews, and conveys reports to management regarding incidents. Implements effective monitoring and alert processes to ensure timely recognition of events. Creates playbooks or other documentation that address recurring issues.

Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis.

Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies. Facilitates security strategy across the Bank.

Position Specific Skills

• Knowledge of applicable services, products, technologies, and monitoring or alerting tools
• Knowledge of coding and scripting languages like Python, Perl, and PowerShell
• Knowledge of cryptographic implementations
• Knowledge of risk management standards, procedures, and data security practices
• Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
• Availability to provide after-hours operational support on a rotational basis, with minimal travel

Qualifications

Minimum Required Education and Experience: Bachelor's Degree and 8 years' experience.

OR

High School Diploma or GED/Equivalent and 12 years' experience in Systems Engineering, Network, or Information Security.

Preferred Skills

• Strong, hands‑on knowledge of federated authentication protocols, including SAML and OIDC
• Hands‑on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping)
• Proven scripting and automation expertise in Python and PowerShell
• Demonstrated experience designing and implementing Infrastructure as Code (e.g., Terraform)
• Experience designing and leading automation of identity and security processes/workflows (e.g., Okta Workflows)
• Working knowledge of step‑up / adaptive authentication design
• Experience with identity threat protection platforms (e.g., Silverfort)
• Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)
• Experience across multiple IAM platforms (e.g., both Okta and Ping)

Additional Information

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.