Principal Cyber Security Engineer - IAM/SSO (Remote)

First Citizens Bank is seeking a Principal Cyber Security Engineer specializing in IAM/SSO. This remote role involves leading the engineering and management of security tools and processes to protect the Bank's information assets, as well as mentoring less experienced associates.

Responsibilities:

• Security Engineering - Researches and executes process or system improvements that enhance the Bank's information security. Leads security assessments, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary standards, regulations or best practices. Oversees security projects and associate teams as assigned
• Technical Expertise - Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank's information systems and resources. Advises management on security protocols and incidents. Mentors and trains associates to ensure team knowledge and effectiveness
• Issue Resolution - Leads the investigation and resolution of incidents. Prepares, reviews, and conveys reports to management regarding incidents. Implements effective monitoring and alert processes to ensure timely recognition of events. Creates playbooks or other documentation that address recurring issues
• Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank's networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis
• Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies. Facilitates security strategy across the Bank

Requirements:

• Strong, hands-on knowledge of federated authentication protocols, including SAML and OIDC
• Hands-on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping)
• Proven scripting and automation expertise in Python and PowerShell
• Demonstrated experience designing and implementing Infrastructure as Code (e.g., Terraform)
• Experience designing and leading automation of identity and security processes/workflows (e.g., Okta Workflows)
• Working knowledge of step-up / adaptive authentication design
• Bachelor's Degree and 8 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 12 years of experience in Systems Engineering, Network, or Information Security
• Experience with identity threat protection platforms (e.g., Silverfort)
• Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)
• Experience across multiple IAM platforms (e.g., both Okta and Ping)