Sr Principal DT Security Engineer - 90343213 - Remote

Amtrak connects businesses and communities across the United States through its passenger railroad services and employs professionals across diverse career fields. The Senior Principal DT Security Engineer leads enterprise cybersecurity capabilities, serving as the technical authority for Identity and Access Management while shaping security strategy, architecture, authentication services, privileged access, and certificate management. The role also provides technical leadership for complex initiatives, roadmaps, governance, operational support, and resolution of identity-related security challenges.

Responsibilities:

• Serve as the senior technical authority and subject matter expert (SME) for Identity and Access Management (IAM) services, providing strategic direction and technical leadership across the organization
• Lead the architecture, design, implementation, and continuous improvement of enterprise authentication and identity platforms, including Active Directory, Microsoft Entra ID, and related identity technologies
• Develop and maintain technology roadmaps, ensuring alignment with organizational objectives, security requirements, compliance mandates, and future business needs
• Assists and/or may lead in the development and analysis of source selection strategies
• Provide architectural guidance and governance for enterprise initiatives, evaluating proposed solutions and ensuring adherence to IAM standards, security principles, and best practices
• Lead the planning and execution of complex projects and programs, including resource planning, prioritization, risk management, and stakeholder engagement
• Drive the strategy, implementation, and optimization of Privileged Access Management (PAM) solutions to strengthen security, reduce risk, and support regulatory compliance
• Serve as the subject matter expert for Certificate Lifecycle Management (CLM), providing technical leadership for enterprise PKI, digital certificates, and certificate automation
• Establish and enforce technical standards, policies, and operational procedures for identity lifecycle management, authentication services, privileged access, and directory services
• Provide end-to-end operational support for enterprise identity infrastructure, including monitoring, maintenance, incident response, and continuous improvement to ensure reliability, availability, performance, and security
• Collaborate with cross-functional teams to evaluate emerging technologies, assess risks, and influence strategic technology decisions across the enterprise
• Lead root cause analysis and resolution efforts for complex identity, authentication, authorization, and access-related issues, driving long-term corrective actions

Requirements:

• • Bachelor's Degree or equivalent combination of education, training and/or relevant experience
• • Plus 9 years of relevant work experience
• • Experience focused on Identity and Access Management (IAM), authentication services, directory services, and access security technologies
• • Extensive hands-on experience designing, implementing, and supporting enterprise identity platforms, including Microsoft Active Directory, Microsoft Entra ID (Azure AD), federation services, authentication protocols, and identity lifecycle management
• • Demonstrated experience leading Privileged Access Management (PAM) programs and technologies, including privileged account governance, credential management, privileged session controls, and least-privilege security principles
• • Proven experience serving as a technical lead or principal engineer in large, complex enterprise environments, providing architecture guidance, project leadership, and technical mentorship across multiple teams and disciplines
• • Strong experience developing technology roadmaps, leading strategic initiatives, and consulting with executive and senior leadership, with the ability to translate business objectives into secure and scalable technical solutions
• • Excellent customer service, communication, and interpersonal skills essential for collaborative teamwork and self-motivation
• • Proficiency in identifying and implementing security measures, including understanding adversary tactics and tools
• • Experience managing a diverse security ecosystem encompassing SIEM/SOAR, EDR/AV, CASB, IDS/IPS, DLP, UEBA, FW, IAM/SSO technologies
• • Demonstrated ability to influence strategy and solve highly complex, ambiguous security challenges with broad organizational impact
• • Proven ability to lead large, multi-disciplinary initiatives and influence stakeholders across the organization without direct authority
• **Relocation Offered:**No
• **Travel Requirements:**Up to 25%
• • Plus 11 years of relevant work experience
• • Industry certifications such as CISSP, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, CyberArk Defender/Sentry, or equivalent
• • Experience supporting regulatory and compliance frameworks such as PCI DSS, NIST, SOX, ISO 27001, or similar
• • Experience with hybrid identity architectures, cloud security, Zero Trust initiatives, Conditional Access Policies, MFA, and Identity Governance and Administration (IGA) solutions