Senior Information Security Engineer (Remote)

Kohl's; Menomonee Falls (WI); On-site; USD 90,000 - 120,000; Full time

Job summary

Kohl's is seeking a Senior Information Security Engineer to design, build, and manage core security solutions. In this role, you will support various security processes and ensure the integrity of technologies.

Ideal candidates will have extensive experience in Identity and Access Management (IAM), security standards, and developing high-quality, secure applications. This position offers the opportunity to work collaboratively with various teams to achieve business objectives.

Qualifications

• Deep experience designing and operating enterprise IAM platforms.
• Hands-on experience implementing enterprise secrets management solutions.
• Experience with IGA platforms and identity lifecycle management.

Responsibilities

• Provide architectural design and engineering maintenance for security tools.
• Research and advise on new technology and security requirements.
• Develop high-quality applications that are secure and observable.

Skills

Enterprise Identity and Access Management (IAM)

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

SAML 2.0

OAuth 2.0

OpenID Connect (OIDC)

Secrets Management

Application Authentication

Integration Testing

Job description

About the Role

As Senior Information Security Engineer, you will design, build, and run core security solutions that support all information security capabilities and products. You will also provide operational support to security-related Kohl’s Technology processes, including firewall rule request approvals, proxy allow/deny listing and application allow/deny listing.

What You’ll Do

• Provide architectural design, engineering maintenance and application administration for the Information Security tool suite
• Research, test and advise on new technology and security requirements
• Design, develop, test, deploy and iteratively improve product capabilities and features in collaboration with designers, product managers and other engineers on the product team
• Leverage critical thinking, experimentation, data and industry best practices to achieve desired business outcomes
• Develop high-quality applications that are secure, easy to operate, difficult to break, and extremely observable with measurable results
• Oversee all technical aspects of the product application lifecycle, including code, infrastructure, data, security, and CICD
• Contribute to product engineering and software standard
• Expand experience across domains within the role
• Additional tasks may be assigned

Required

• Deep experience designing and operating enterprise Identity and Access Management (IAM) platforms, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), federation, and modern authentication protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and related identity standards
• Hands‑on experience implementing and supporting enterprise secrets management and machine identity solutions, including credential lifecycle management, privileged access patterns, application authentication, certificate management, and secrets automation at scale
• Experience with Identity Governance and Administration (IGA) platforms, including identity lifecycle management, access request and approval workflows, birthright and role-based access provisioning, certification campaigns, segregation of duties, and compliance reporting
• Experience with complex application troubleshooting, performance tuning and integration platforms or frameworks
• Background in integrating with large SaaS systems, migrating on‑prem systems to cloud solutions and developing integration frameworks
• Ability to execute integration testing strategies

Preferred

• Experience as a software developer