Sr.Security Engineer-Identity Security

The Federal Home Loan Bank of Chicago; Chicago (IL); On-site; USD 90,400 - 150,700; Full time

Benefits offered by this job

Retirement program (401k and Pension)

Medical, dental and vision insurance

Lifestyle Spending Account

Competitive PTO plan

11 paid holidays per year

Job summary

The Federal Home Loan Bank of Chicago is seeking a Senior Security Engineer to build a secure technology environment for Bank operations. You will apply a passion for security to create stable, user-friendly solutions for Bank personnel and customers, working within a team of experienced security professionals.

You will design, implement, and operate security controls across Microsoft and cloud services, with a focus on Azure AD, SSO, MFA, and privileged access management.

Qualifications

• 6-8 years of security or technology experience.
• 3+ years in IAM with PAM and SSO experience.
• 4-year IT degree or equivalent.
• Certs preferred: CISSP, SANS GSEC, MCSE/MCITP.
• Experience in Windows Server environments.
• Experience with Agile/Scrum environments.
• Strong communication and teamwork.

Responsibilities

• Design and operate security controls for cloud services (Azure AD focus).
• Implement access control policies in Azure AD.
• Mentor junior staff in Security Engineering and Operations.
• Collaborate with IT teams to deliver secure business solutions.
• Develop security policy, standards, procedures, and design docs.
• Act as escalation for security controls/tools (SSO, MFA).

Skills

IAM

SSO

PAM

Azure AD

MFA

SAML

OIDC

Windows Server

Scripting

Agile/Scrum

Communication

Security Operations

Cloud Fundamentals

Education

4 year college degree in information technology or equivalent

Job description

At the Federal Home Loan Bank of Chicago, employees come first - that's why we offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees.

• Collaborative, in-office operating model
• Retirement program (401k and Pension)
• Medical, dental and vision insurance
• Lifestyle Spending Account
• Competitive PTO plan
• 11 paid holidays per year

What you'll do

The Senior Security Engineer contributes to the success of the Bank by building a safe and sound technology environment for business operations. This individual will apply their passion for security and technology to create secure, stable and easy to use solutions for Bank personnel and other customers. The team this role is a part of focuses on project work and includes experienced, passionate technology security professionals.

How you'll make an impact

• Modernizes and secures workforce, privileged, and machine identity capabilities across the Bank.
• Reduces cyber and operational risk through ownership of critical identity security controls and remediation efforts.
• Drives delivery of strategic identity security initiatives while providing senior technical leadership and mentoring

What you can expect

• Design, implement and operate security controls for various services in the Microsoft and Amazon cloud, with a primary focus in Azure AD.
• Design and implement access control policies within Azure AD.
• Occasionally provide support off-hours when business critical problems arise or to implement significant changes.
• Analyze requirements and apply knowledge of business needs and security risks to determine appropriate course of action.
• Collaborate with different areas of IT in order to provide security and business technology solutions for the Bank.
• Development of security policy, standard, procedure and design documents.
• Design, engineer, and deploy technologies for application integrations such as SAML and OIDC
• Act as a point of escalation for issues relating to security controls or tools, including (but not limited to) SSO, MFA, certificates, and privileged access management tooling.
• Provide mentoring to junior staff in the Security Engineering and Security Operations teams.

What you'll bring

• 6-8 years of security or technology experience.
• 3+ years in IAM or other identity focused teams, with direct experience implementing PAM and SSO solutions.
• 4 year college degree in information technology or equivalent experience.
• Security and technology certifications are highly preferred (CISSP, SANS GSEC, MCSE/MCITP).
• Experience in a Windows Server Environment.
• Scripting/automation experience preferred.
• Experience or interest in working in an agile/scrum format.
• Outstanding communication (verbal, written, visualization and listening) skills.
• Self-starter who can work independently as well as in a team setting.
• Giving and receiving effective feedback across all interactions.
• Ability to address conflict with peers and others in the organization.
• Interest in understanding customer perspective to aid in development of the right solution.
• Commitment to delivering quality solutions.
• Ability to communicate technical topics to a non-technical audience.
• Interest in understanding business needs to aid in developing solutions that are right for the broader organization.
• Interest in working on a broad range of IT projects (Security, IaaS, Automation, Network, VoIP, Database,).
• Knowledge of IT security controls and infrastructure
• Working knowledge of security principles and technology best practices.
• Experience with Security Assessment and operations.
• Cloud Fundamentals
• Monitoring and Logging
• Security, Identity & Compliance
• Security Consulting And Review
• Security Framework Design
• Security Stewardship and Governance
• Security Systems Engineering
• Security Training Development and Delivery
• Incident and Problem Management
• Infrastructure Monitoring, Event Management, and Operations
• IT Risk and Controls Assessment
• IT Risk Training Development and Delivery
• Technical Literacy
• Distributed Logging, Log Querying, and Log Analytics
• Secure Coding Practices

Salary Range:

$90,400.00 - $150,700.00

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors. In addition to the base salary, we offer a comprehensive benefits package which can be found here: https://hrportal.ehr.com/fhlbc