Principal Cyber Security Engineer - SSO/IAM (Remote)

First Citizens Bank is hiring a Principal Cyber Security Engineer to lead security engineering and operations that protect the Bank’s information assets and technology infrastructure. The role assesses vulnerabilities, designs and implements security solutions, leads incident response and security initiatives, and mentors associates, with a focus on SSO and IAM.

Responsibilities:

• This position leads daily engineering, operations, analysis, management, and administration of tools, systems, or processes that secure the Bank's information assets and technology infrastructure. Assesses organizational networks, applications, or systems for potential vulnerabilities. Designs and implements technical solutions that strengthen security. Serves as a technical resource to management, associates, and business teams. Acts as a mentor and leader to less experienced associates in the work group
• Security Engineering - Researches and executes process or system improvements that enhance the Bank’s information security. Leads security assessments, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary standards, regulations or best practices. Oversees security projects and associate teams as assigned
• Technical Expertise - Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank’s information systems and resources. Advises management on security protocols and incidents. Mentors and trains associates to ensure team knowledge and effectiveness
• Issue Resolution - Leads the investigation and resolution of incidents. Prepares, reviews, and conveys reports to management regarding incidents. Implements effective monitoring and alert processes to ensure timely recognition of events. Creates playbooks or other documentation that address recurring issues
• Analysis - Identifies and evaluates identify potential threats or vulnerabilities in the Bank’s networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis
• Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies. Facilitates security strategy across the Bank

Requirements:

• Knowledge of applicable services, products, technologies, and monitoring or alerting tools
• Knowledge of coding and scripting lanuages like Python, Perl, and PowerShell
• Knowledge of cryptographic implementations
• Knowledge of risk management standards, procedures, and data security practices
• Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments
• Bachelor's Degree and 8 years' experience
• High School Diploma or GED/Equivalent and 12 years' experience in Systems Engineering, Network, or Information Security
• Strong, hands-on knowledge of federated authentication protocols, including SAML and OIDC
• Hands-on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping)
• Proven scripting and automation expertise in Python and PowerShell
• Demonstrated experience designing and implementing Infrastructure as Code (e.g., Terraform)
• Experience designing and leading automation of identity and security processes/workflows (e.g., Okta Workflows)
• Working knowledge of step-up / adaptive authentication design
• Experience with identity threat protection platforms (e.g., Silverfort)
• Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass)
• Experience across multiple IAM platforms (e.g., both Okta and Ping)