Security Specialist - Senior
American Electric Power Co.
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
AEP is seeking a Security Specialist focused on Identity & Access Management (IAM) to deliver enterprise IAM capabilities. You will partner with security, architecture, and development teams to implement secure, compliant access controls across the identity lifecycle.
The role emphasizes collaboration, requirement elicitation, risk assessment, and modernization of IAM, including RBAC, privileged access, and non-human identities. Excellent communication is essential.
Qualifications
- Bachelor’s degree or associates degree with 2 years of relevant experience.
- 2+ years IT-related experience; or 1+ year security-related experience for SG7.
- 4+ years IT-related experience; or 2+ years security-related experience for SG8.
Responsibilities
- Design, implement, enhance, and support IAM technologies and processes.
- Analyze requirements and recommend IAM solutions aligned with security objectives.
- Contribute to IAM modernization initiatives (RBAC, PAM, identity hygiene).
- Develop runbooks, documentation, and governance artifacts.
Skills
Education
Tools
Job description
The Security Specialist - Identity & Access Management (IAM) is responsible for supporting and delivering Identity and Access Management capabilities across the enterprise. This position serves as an IAM Subject Matter Expert (SME) and participates in the analysis, design, implementation, support, governance, and continuous improvement of IAM processes and solutions.
The role works closely with business partners, security teams, architects, developers, auditors, and technology teams to ensure secure, compliant, and efficient access management practices are implemented throughout the identity lifecycle. Responsibilities include gathering and documenting requirements, evaluating technical and functional solutions, assessing risks and controls, supporting IAM operations, and contributing to IAM strategy and modernization initiatives.
The successful candidate possesses strong communication, analytical, problem-solving, documentation, and relationship management skills. This individual must be capable of translating business requirements into technical solutions while balancing security, usability, compliance, and operational efficiency.
What You’ll Do:
Essential Job Functions & Tasks:
- Participate in the design, implementation, enhancement, and support of IAM technologies and processes.
- Analyze business and technical requirements and recommend IAM solutions aligned with enterprise security objectives.
- Evaluate functional and technical options, document recommendations, and support strategic decision-making.
- Contribute to IAM modernization initiatives including role-based access control, privileged access governance, identity hygiene, and non-human identity management.
- Assist in developing IAM roadmaps, standards, and best practices.
- Support access requests, approval, provisioning, de-provisioning, and reconciliation processes.
- Assist with access certifications, entitlement reviews, and attestation activities.
- Support role engineering, role mining, and RBAC implementation efforts.
- Validate access models and entitlement structures to ensure least privilege principles are maintained.
- Identify segregation of duties conflicts and access risks.
- Support governance and lifecycle management of privileged accounts and privileged access.
- Participate in onboarding, monitoring, and auditing privileged identities.
- Partner with technology teams to improve privileged access controls and reduce standing privileges.
- Support lifecycle management of service accounts, application accounts, APIs, and other non-human identities.
- Assist in establishing accountability, ownership, certification, and governance requirements.
- Evaluate orphaned or unmanaged identities and recommend remediation actions.
- Support controls related to secrets, certificates, and machine credentials.
- Assist in managing and supporting cloud identity capabilities including Microsoft Entra ID.
- Partner with infrastructure and application teams to integrate cloud and on-premises identity services.
- Elicit, analyze, and document business, functional, technical, and security requirements.
- Develop process flows, data mappings, architecture diagrams, use cases, and operational documentation.
- Analyze business processes and identify opportunities for standardization, automation, and optimization.
- Develop status reports, executive summaries, operational metrics, and project documentation.
- Develop or assist with automation, reporting, scripting, and process improvements where appropriate.
- Collaborate with development teams to ensure IAM requirements are incorporated into solution designs.
- Support audits, assessments, regulatory reviews, and compliance initiatives.
- Participate in the development and maintenance of IAM policies, standards, procedures, and control documentation.
- Evaluate IAM-related risks and recommend mitigation strategies.
- Assist in gathering control evidence and supporting internal and external audits.
- Assist in troubleshooting identity and access management issues.
- Participate in incident, problem, and root cause analysis activities.
- Develop and maintain operational runbooks and support documentation.
- Identify opportunities to enhance IAM service quality, operational efficiency, and user experience.
- Work closely with business partners, security teams, architects, developers, auditors, and vendors.
- Communicate complex IAM concepts to both technical and non-technical audiences.
- Mentor junior team members and share IAM knowledge across teams.
- Foster productive working relationships while advocating for secure, compliant, and scalable IAM solutions
Preferred Skills & Experience:
- Identity Governance Administration (IGA) platforms (e.g., Saviynt, SailPoint, Entra ID Governance)
- Privileged Access Management solutions (e.g., CyberArk)
- Microsoft Entra ID / Azure AD
- Identity Lifecycle Management
- RBAC and Role Engineering
- Service Account and Non-Human Identity Governance
- Directory Services
- Access Certifications and Compliance Programs
- Security Frameworks (NIST CSF, NIST 800-53, CIS Controls)
- Process Mapping and Data Analysis
- SQL, PowerShell, Python, or automation scripting
- Agile methodologies and DevSecOps practices
- Technical writing and executive-level communication
What We’re Looking For:
Security Specialist (SG7)
Education requirements are listed below:
- Bachelor’s degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 3 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively, may have non-degree qualifications (such as hands‑on demonstrated ability in a technical interview/assessment).
Work Experience Requirements are listed below:
- 2 or more years of Information Technology related experience; OR 1 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.
Security Specialist (SG8)
Education requirements are listed below:
- Bachelor’s degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively, may have non-degree qualifications (such as hands‑on demonstrated ability in a technical interview/assessment).
Work Experience Requirements are listed below:
- 4 or more years of Information Technology related experience; OR 2 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.
Additional Requirements:
- Licenses/Certifications: CISSP or other Security certification helpful.
- Some travel and overtime (OT) may be required.
What You’ll Get:
- Base salary
- Annual bonus
- Long-term incentive
- 401(k) match
- AEP Pension
- Comprehensive benefits package designed to support and enhance the overall well-being of employees.
At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you’re passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!
$87,633.00 - $128,688.00
The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.
Share
Details
Coordinate activities related to the investigation of theft, vandalism, threats and related security matters in assigned region . Ensure that security measures and equipment are properly installed in all locations and that security practices are communicated to applicable employees, contractors and outside law enforcement officials .
The Director / Managing Director, Cyber AI provides senior leadership for the cybersecurity organization’s artificial intelligence strategy and program. The role sets direction for protecting enterprise AI and for responsibly applying AI to improve cybersecurity outcomes, while aligning priorities, investment, governance, and operating models with enterprise objectives. This leader establishes a coherent Cyber AI portfolio, develops accountable leaders and teams, and represents cybersecurity in enterprise AI decisions. The role operates through established enterprise authorities for architecture, risk, governance, privacy, legal, compliance, technology operations, and incident response rather than duplicating those functions. This position is 100% onsite in either Columbus, OH or Austin, TX. There are several compensation components on top of the listed (base) starting salary range, such as annual bonus, long-term incentive, pension, etc.
The Managing Director, OT Security provides senior leadership for the cybersecurity strategy, operating model, services, and risk outcomes protecting operational technology across AEP's Transmission, Distribution, and Generation fleet, including nuclear generation in coordination with the licensed nuclear cybersecurity program. The role leads a shared-services OT Security organization and aligns priorities, investment, talent, and delivery with business-unit operational needs, enterprise cybersecurity strategy, NERC CIP, NRC, and internal cybersecurity requirements, and the safety, reliability, and resilience expectations of critical infrastructure. This leader must bring deep, practical understanding of the business of electricity generation, transmission, distribution, and how electricity systems are protected from cyber threats. The Managing Director is accountable for ensuring OT Security group can define security requirements, lead architecture and engineering efforts, validate security outcomes, prioritize vulnerability risk, integrate monitoring and detection, coordinate OT incident response and recovery, assess technology, maintain trusted Business Unit partnerships, and build missing OT security capabilities. The role operates through established enterprise authorities and leverages Enterprise Security capabilities rather than duplicating them. This position is 100% onsite in either Columbus, OH or Austin, TX. There are several compensation components on top of the listed (base) starting salary range, such as annual bonus, long-term incentive, pension, etc.
AEP offers generous time off, competitive pay, and educational opportunities to help employees advance their careers.
Our culture is purpose-driven and team-oriented: we combine innovation with a customer-first focus to deliver reliable energy and brighter futures.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
