Senior IT Security Engineer: PCI DSS & Zero Trust

Follett Corporation; Westchester (IL); On-site; USD 40,000 - 142,000; Full time

Benefits offered by this job

Benefits package

401(k) plan

Paid holidays

Paid time off

Job summary

Follett Higher Education is seeking a Senior IT Security Engineer to design and implement protective and detective controls ensuring confidentiality, integrity, and availability of Follett data. The role focuses on PCI DSS compliance, security tooling (CrowdStrike, Sentinel, Mimecast, Qualys, Illumio), identity management, and Zero Trust across on-premises and cloud environments.

The position involves risk assessments, audits, and collaboration with MSSPs to enhance security posture and

Qualifications

• 5-7 years of experience in information security, including at least 5 years in security engineering, network security, firewall administration, or compliance.
• Strong experience with enterprise security platforms, including CrowdStrike, Qualys, Microsoft Sentinel, or comparable technologies.
• Knowledge of network security architecture, firewall management, network segmentation, secure connectivity, and Zero Trust security models.
• Experience in securing cloud environments such as Microsoft Azure, AWS, or Google Cloud Platform (GCP).
• In-depth understanding of PCI DSS compliance requirements, security audits, and remediation processes.
• Familiarity with NIST CSF and NIST 800-53 security frameworks.
• Experience with identity and access management (IAM), privileged access controls, MFA, and role-based access management.

Responsibilities

• Design, implement, and maintain enterprise security controls to protect company data, systems, and IT infrastructure.
• Manage and administer security technologies, including CrowdStrike, Microsoft Sentinel, Mimecast, Qualys, Illumio, and GlobalProtect.
• Ensure compliance with PCI DSS requirements, NIST Cybersecurity Framework (CSF), and NIST 800-53 standards.
• Conduct security assessments, vulnerability analyses, compliance audits, and risk evaluations to identify and address security gaps.
• Engineer and maintain identity and access management solutions, including privileged access management, multifactor authentication (MFA), and password vaulting.
• Implement and maintain network security measures, including firewalls, network segmentation, secure connectivity, and Zero Trust principles.
• Support cloud security operations, including Azure native security controls and cloud security best practices.
• Monitor security environments, investigate potential threats, troubleshoot technical issues, and recommend remediation strategies.
• Develop and maintain security policies, procedures, and technical controls aligned with organizational and regulatory requirements.
• Prepare security reports, communicate risks, and recommend improvements to strengthen the organization’s security posture.
• Collaborate with internal IT teams, business stakeholders, and Managed Security Service Providers (MSSPs) to support security operations.

Skills

Information security

Security engineering

IAM / IAM controls

MFA

PCI DSS

Tools

CrowdStrike

Microsoft Sentinel

Qualys

Illumio

GlobalProtect

Job description

Follett Higher Education is seeking a Senior IT Security Engineer to design and implement protective and detective controls ensuring confidentiality, integrity, and availability of Follett data. The role focuses on PCI DSS compliance, security tooling (CrowdStrike, Sentinel, Mimecast, Qualys, Illumio), identity management, and Zero Trust across on-premises and cloud environments.

The position involves risk assessments, audits, and collaboration with MSSPs to enhance security posture and