Sr.Security Engineer-Identity Security

FHLBank Chicago; Chicago (IL); On-site; USD 90,000 - 151,000; Full time

Benefits offered by this job

401k

Pension

Medical Insurance

Dental Insurance

Vision Insurance

Lifestyle Spending Account

Paid Time Off

11 holidays

Job summary

Federal Home Loan Bank of Chicago is seeking a Senior Security Engineer to strengthen a secure, scalable technology environment for business operations. You will work with an experienced team to deliver secure, reliable solutions and mentor other security professionals.

The role focuses on identity security across cloud services (Azure AD, SAML, OIDC) and requires hands-on leadership in implementing PAM, SSO, and security controls.

Qualifications

• 6-8 years of security or technology experience.
• 3+ years in IAM or other identity focused teams, with direct experience implementing PAM and SSO.
• 4 year college degree in information technology or equivalent experience.
• Security and technology certifications are highly preferred (CISSP, SANS GSEC, MCSE/MCITP).
• Experience in a Windows Server Environment.
• Scripting/automation experience preferred.
• Experience or interest in working in an agile/scrum format.
• Outstanding communication (verbal, written, visualization and listening) skills.

Responsibilities

• Design, implement and operate security controls for services in Microsoft and Amazon cloud, focusing on Azure AD.
• Design and implement access control policies within Azure AD.
• Provide support off-hours when needed for critical problems or significant changes.
• Analyze requirements and apply knowledge of business needs and security risks to determine actions.
• Collaborate with IT to provide security and business technology solutions.
• Develop security policy, standards, procedures and design documents.
• Design and deploy technologies for application integrations such as SAML and OIDC.
• Escalate security control/tool issues (SSO, MFA, certificates, PAM tooling).
• Mentor junior staff in Security Engineering and Security Operations.

Skills

IAM

PAM

SSO

Windows Server

Scripting

Automation

Agile/Scrum

Security

Cloud Fundamentals

Monitoring & Logging

Security Operations

Incident Management

IT Risk & Controls

Communication

Problem Solving

Education

4 year college degree in information technology

Tools

CISSP

SANS GSEC

MCSE/MCITP

Job description

At the Federal Home Loan Bank of Chicago, employees come first - that's why we offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees.

• Collaborative, in-office operating model
• Retirement program (401k and Pension)
• Medical, dental and vision insurance
• Lifestyle Spending Account
• Competitive PTO plan

11 paid holidays per year

What you'll do

The Senior Security Engineer contributes to the success of the Bank by building a safe and sound technology environment for business operations. This individual will apply their passion for security and technology to create secure, stable and easy to use solutions for Bank personnel and other customers. The team this role is a part of focuses on project work and includes experienced, passionate technology security professionals.

How you'll make an impact

• Modernizes and secures workforce, privileged, and machine identity capabilities across the Bank.
• Reduces cyber and operational risk through ownership of critical identity security controls and remediation efforts.
• Drives delivery of strategic identity security initiatives while providing senior technical leadership and mentoring

What you can expect

• Design, implement and operate security controls for various services in the Microsoft and Amazon cloud, with a primary focus in Azure AD.
• Design and implement access control policies within Azure AD.
• Occasionally provide support off-hours when business critical problems arise or to implement significant changes.
• Analyze requirements and apply knowledge of business needs and security risks to determine appropriate course of action.
• Collaborate with different areas of IT in order to provide security and business technology solutions for the Bank.
• Development of security policy, standard, procedure and design documents.
• Design, engineer, and deploy technologies for application integrations such as SAML and OIDC
• Act as a point of escalation for issues relating to security controls or tools, including (but not limited to) SSO, MFA, certificates, and privileged access management tooling.
• Provide mentoring to junior staff in the Security Engineering and Security Operations teams.

What you'll bring

• 6-8 years of security or technology experience.
• 3+ years in IAM or other identity focused teams, with direct experience implementing PAM and SSO solutions.
• 4 year college degree in information technology or equivalent experience.
• Security and technology certifications are highly preferred (CISSP, SANS GSEC, MCSE/MCITP).
• Experience in a Windows Server Environment.
• Scripting/automation experience preferred.
• Experience or interest in working in an agile/scrum format.
• Outstanding communication (verbal, written, visualization and listening) skills.
• Self-starter who can work independently as well as in a team setting.
• Giving and receiving effective feedback across all interactions.
• Ability to address conflict with peers and others in the organization.
• Interest in understanding customer perspective to aid in development of the right solution.
• Commitment to delivering quality solutions.
• Ability to communicate technical topics to a non-technical audience.
• Interest in understanding business needs to aid in developing solutions that are right for the broader organization.
• Interest in working on a broad range of IT projects (Security, IaaS, Automation, Network, VoIP, Database,).
• Knowledge of IT security controls and infrastructure
• Working knowledge of security principles and technology best practices.
• Experience with Security Assessment and operations.
• Cloud Fundamentals
• Monitoring and Logging
• Security, Identity & Compliance
• Security Consulting And Review
• Security Framework Design
• Security Stewardship and Governance
• Security Systems Engineering
• Security Training Development and Delivery
• Incident and Problem Management
• Infrastructure Monitoring, Event Management, and Operations
• IT Risk and Controls Assessment
• IT Risk Training Development and Delivery
• Technical Literacy
• Distributed Logging, Log Querying, and Log Analytics
• Secure Coding Practices

Salary Range:

$90,400.00 - $150,700.00

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors. In addition to the base salary, we offer a comprehensive benefits package which can be found here: https://hrportal.ehr.com/fhlbc