Senior Information Security Engineer — Identity & Access

Lcsnet; Des Moines (IA); On-site; USD 98,000 - 122,000; Full time

Benefits offered by this job

Industry Leader

Top Workplace USA

Top Workplace Iowa

Community involvement

Career development

Advancement opportunities

Job summary

LCS is seeking an Information Security Engineer to oversee daily user access and identity management across all LCS customer and business applications. You will research, plan, and implement security controls to protect networks and systems from cyber threats.

You’ll join a supportive IT team reporting to the VP of Information Technology, work on Entra/Okta, vulnerability management, phishing simulations, and AI security initiatives while ensuring least-privilege access and ongoing risk

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent year of experience
• 6+ years related experience
• In-depth knowledge of security best practices, data protection, and regulatory compliance
• Excellent problem-solving skills and the ability to troubleshoot complex issues
• Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders

Responsibilities

• Administer and manage IT Security technologies including Entra, Okta, vulnerability management, spam email tech, simulated phishing technology, and generative AI solutions.
• Manage the complete user access lifecycle for corporate associates, community associates, contractors, and third-party vendors, including provisioning, modifications, transfers, and terminations.
• Ensure employee access to business and clinical applications is assigned according to job responsibilities, least-privilege principles, and established security standards.
• Conduct periodic user access reviews and certification campaigns for critical systems used across senior living operations, including financial, resident management, healthcare, and human resources applications.
• Monitor security alerts, suspicious activity, and system-generated events to identify potential threats impacting LCS communities, corporate operations, or resident information.
• Administer and support enterprise security solutions, including endpoint protection, email security, vulnerability management, identity protection, device management, and security monitoring platforms.
• Partner with Infrastructure and Application teams to remediate security vulnerabilities, implement security hardening recommendations, and maintain secure system configurations.
• Participate in investigations involving suspected security incidents, unauthorized access attempts, phishing attacks, malware infections, or policy violations.
• Perform security risk assessments for new technologies, business initiatives, acquisitions, community transitions, and third-party vendor solutions.
• Support due diligence and integration activities related to community acquisitions, management changes, and new community openings.
• Develop and maintain information security policies, standards, procedures, and access governance practices.
• Assist with business continuity and disaster recovery planning activities to support uninterrupted operations across LCS-managed communities.
• Support internal audits, external audits, and regulatory assessments by documenting controls, collecting evidence, and responding to audit requests.
• Educate associates and business partners on cybersecurity risks, security policies, and best practices designed to protect resident and organizational information.
• Research emerging cybersecurity threats and recommend enhancements to strengthen security controls throughout the organization.
• Maintain documentation related to security systems, access management processes, operational procedures, and technical standards.
• Perform other duties and responsibilities as assigned.

Skills

Security best practices

Data protection

Regulatory compliance

Problem solving

Communication skills

Education

Bachelor's degree in CS/IT or related field

Tools

Microsoft Entra

Okta identity management

Vulnerability management

Spam email technology

Phishing simulations

Generative AI security

Job description

LCS is seeking an Information Security Engineer to oversee daily user access and identity management across all LCS customer and business applications. You will research, plan, and implement security controls to protect networks and systems from cyber threats.

You’ll join a supportive IT team reporting to the VP of Information Technology, work on Entra/Okta, vulnerability management, phishing simulations, and AI security initiatives while ensuring least-privilege access and ongoing risk