Principal Cyber Security Engineer - SSO/IAM (Remote)

First Citizens Bank is seeking a Principal Cyber Security Engineer to lead the engineering, operations, analysis, management, and administration of security tools, systems, and processes. The role focuses on assessing vulnerabilities, implementing security solutions, leading incident response and security projects, advising management, and mentoring less experienced associates, with an emphasis on SSO and IAM technologies.

Responsibilities:

• Security Engineering - Researches and executes process or system improvements that enhance the Bank’s information security. Leads security assessments, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary standards, regulations or best practices. Oversees security projects and associate teams as assigned
• Technical Expertise - Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank’s information systems and resources. Advises management on security protocols and incidents. Mentors and trains associates to ensure team knowledge and effectiveness
• Issue Resolution - Leads the investigation and resolution of incidents. Prepares, reviews, and conveys reports to management regarding incidents. Implements effective monitoring and alert processes to ensure timely recognition of events. Creates playbooks or other documentation that address recurring issues
• Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis
• Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies. Facilitates security strategy across the Bank

Requirements:

• This is a remote role that can be hired in NC, AZ, and TX
• Knowledge of applicable services, products, technologies, and monitoring or alerting tools
• Knowledge of coding and scripting lanuages like Python, Perl, and PowerShell
• Knowledge of cryptographic implementations
• Knowledge of risk management standards, procedures, and data security practices
• Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
• Availability to provide after-hours operational support on a rotational basis, with minimal travel
• Minimum Required Education and Experience: Bachelor's Degree and 8 years' experience
• High School Diploma or GED/Equivalent and 12 years' experience in Systems Engineering, Network, or Information Security
• Strong, hands-on knowledge of federated authentication protocols, including SAML and OIDC
• Hands-on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping)
• Proven scripting and automation expertise in Python and PowerShell
• Demonstrated experience designing and implementing Infrastructure as Code (e.g., Terraform)
• Experience designing and leading automation of identity and security processes/workflows (e.g., Okta Workflows)
• Working knowledge of step-up / adaptive authentication design
• Experience with identity threat protection platforms (e.g., Silverfort)
• Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)
• Experience across multiple IAM platforms (e.g., both Okta and Ping)