Sr. IT Security Engineer

Follett Corporation; Westchester (IL); On-site; USD 40,000 - 142,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability

Wellness programs

401(k) plan

Flex spending

Paid holidays

Paid time off

Job summary

Follett Higher Education is seeking a Senior IT Security Engineer to design and enforce protective controls and ensure PCI DSS and NIST compliance across its security stack. You will manage tools like CrowdStrike, Sentinel, Mimecast, Qualys, and Illumio, while advancing identity management and Zero Trust across on-prem and cloud environments.

You will collaborate with MSSPs, IT teams, and stakeholders to strengthen the organization’s security posture and protect critical data assets.

Qualifications

• 5-7 years in information security, with at least 5 in security engineering or related areas.
• Strong experience with enterprise security platforms: CrowdStrike, Qualys, Sentinel.
• Knowledge of network security architecture, firewall management, and Zero Trust.
• Experience securing cloud environments: Azure, AWS, GCP.
• Familiarity with PCI DSS, NIST CSF, and NIST 800-53.
• IAM concepts including privileged access, MFA, and password vaulting.
• Experience with third-party security providers and regulatory compliance.

Responsibilities

• Design, implement, and maintain enterprise security controls to protect data and IT infrastructure.
• Manage and administer security technologies, including CrowdStrike, Sentinel, Mimecast, Qualys, Illumio, GlobalProtect.
• Ensure PCI DSS, NIST CSF, and NIST 800-53 compliance across systems and processes.
• Conduct security assessments, vulnerability analyses, and risk evaluations.
• Engineer and maintain IAM solutions with privileged access management and MFA.
• Implement network security measures: firewalls, segmentation, Zero Trust.
• Support cloud security operations for Azure, AWS, and GCP.
• Monitor security environments, investigate threats, and recommend remediations.
• Develop and maintain security policies, procedures, and controls.
• Prepare security reports and collaborate with MSSPs and IT teams.

Skills

Security engineering

Network security

IAM

MFA

Zero Trust

RBAC

PCI DSS knowledge

Tools

CrowdStrike

Microsoft Sentinel

Qualys

Illumio

GlobalProtect

PCI tooling

Job description

Follett Higher Education is a leading educational service provider and omnichannel retailer that provides students, faculty and staff, parents, and fans with the course materials, learning tools, and retail services needed to successfully support the collegiate journey. Follett Higher Education supports over 6 million students through its 1,100 physical and 1,750 eCommerce campus stores across North America.

The Senior IT Security Engineer is responsible for designing and implementing protective and detective controls to maintain the confidentiality, integrity, and availability of Follett data and ensuring compliance with applicable regulatory standards, regulations, laws, contractual requirements, and best practices. This position involves planning, design, implementation, enforcement, and audit of security controls, policies, and procedures. Maintains knowledge of trends and threats in information security, and recommends where additional tools, technologies, controls, policies, and procedures are required to appropriately manage Follett risk. Evaluates and recommends security products, services, and/or procedures to enhance productivity and effectiveness. Conducts proactive monitoring of Follett's security profile and works with Managed Security Service Providers to accomplish tasks as needed.

The Senior IT Security Engineer will be instrumental in managing, configuring, and ensuring compliance with our technical security systems. This includes, but is not limited to, CrowdStrike, Sentinel, Mimecast, Qualys, Illumio, and others as needed. They will also be responsible for the Engineering and oversight of identity management solutions, including privileged account management, multifactor authentication, and password vaulting solutions. A key part of the role will be to focus on ensuring Payment Card Industry Data Security Standard (PCI DSS) compliance across our network security tools and practices, as well as NIST CSF and NIST 800-53.

Pay Range

The estimated pay range for this job. Disclosing pay information promotes competitive and equitable pay. The actual pay rate will depend on the person's qualifications and experience.

$40,000.00 - $141,700.00 / year

Pay Transparency

The annual salary/hourly rate range has been established based on the role, experience, skill set, and location. The exact starting salary/hourly rate within the range will depend on the role and the local market. This position may be eligible to participate in one of the Company’s incentive plans. The amount of any incentive payment varies and is subject to the terms and conditions of the applicable incentive plan.

Benefits

• medical
• dental
• vision
• disability
• wellness programs
• 401(k) plan
• flex spending
• paid holidays
• paid time off

Eligibility for benefits is governed by the applicable policies and plan documents.

Equal Opportunity Employer. This company considers candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Follett Higher Education is a drug-free workplace environment.

Responsibilities

• Design, implement, and maintain enterprise security controls to protect company data, systems, and IT infrastructure.
• Manage and administer security technologies, including CrowdStrike, Microsoft Sentinel, Mimecast, Qualys, Illumio, and GlobalProtect.
• Ensure compliance with PCI DSS requirements, NIST Cybersecurity Framework (CSF), and NIST 800-53 standards.
• Conduct security assessments, vulnerability analyses, compliance audits, and risk evaluations to identify and address security gaps.
• Engineer and maintain identity and access management solutions, including privileged access management, multifactor authentication (MFA), and password vaulting.
• Implement and maintain network security measures, including firewalls, network segmentation, secure connectivity, and Zero Trust principles.
• Support cloud security operations, including Azure native security controls and cloud security best practices.
• Monitor security environments, investigate potential threats, troubleshoot technical issues, and recommend remediation strategies.
• Develop and maintain security policies, procedures, and technical controls aligned with organizational and regulatory requirements.
• Prepare security reports, communicate risks, and recommend improvements to strengthen the organization's security posture.
• Collaborate with internal IT teams, business stakeholders, and Managed Security Service Providers (MSSPs) to support security operations.

Requirements

• 5-7 years of experience in information security, including at least 5 years in security engineering, network security, firewall administration, or compliance.
• Strong experience with enterprise security platforms, including CrowdStrike, Qualys, Microsoft Sentinel, or comparable technologies.
• Knowledge of network security architecture, firewall management, network segmentation, secure connectivity, and Zero Trust security models.
• Experience in securing cloud environments such as Microsoft Azure, AWS, or Google Cloud Platform (GCP).
• In-depth understanding of PCI DSS compliance requirements, security audits, and remediation processes.
• Familiarity with NIST CSF and NIST 800-53 security frameworks.
• Experience with identity and access management (IAM), privileged access controls, MFA, and role-based access management.
• Demonstrated ability to conduct security risk assessments, vulnerability management, and technical security troubleshooting.
• Experience collaborating with third-party security providers and supporting regulatory compliance initiatives.