Lead Information Security Engineer - Authentication

USAA is a financial services company focused on helping its members achieve financial security through competitive products, service, and trusted advice. The Lead Information Security Engineer will provide technical leadership for enterprise authentication and privileged access management, designing and modernizing identity services across the organization. The role will also establish authentication standards, resolve complex security issues, lead cross-functional initiatives, and mentor engineers within a Zero Trust environment.

Responsibilities:

• Responsible for ensuring that security requirements are adequately addressed in all aspects of a solution/application enablement and sustainment lifecycle
• Design, develop, code, integrate, and test complex cross functional technical solutions with a focus on security, often collaborating with Engineers or Architects outside of team/department
• Leads the team in code/design reviews and engineering efficiencies to ensure effective operations and accurate planning
• Independently resolves complex production issues and leads troubleshooting of end-to-end solutions that span multiple applications and systems
• Works with architecture to help define direction for cross functional or highly complex key technologies within a specific security domain
• Advance professional development through active participation in industry organizations, writing programming publications, pursuing educational opportunities, establishing personal networks, and participating in professional societies
• Leverages Site Reliability Engineering practices in their domain
• Influences and leads cross-functional efforts across USAA as a subject matter expert in their domain
• Monitors and troubleshoots highly complex systems, tools, and vendor integrations. Performs continuous research, analysis, and troubleshooting to identify, resolve, and report on highly complex security issues
• Collaborates with Security Analysts, IT and Business Partners to tune, harden, and enhance Security solutions and technologies to keep up with the latest trends and threats
• Provides mentorship and guidance to junior engineers, fosters a culture of continuous learning and professional growth, and ensures the team stays current with the latest security trends and technologies
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures

Requirements:

• Bachelor's degree; OR 4 years of relevant education and/or experience
• 8 years of related experience in Security Engineering and/or Information Technology with a security focus to include experience leading driving company-wide technology projects or initiatives
• Demonstrated experience architecting, engineering, and supporting enterprise authentication solutions utilizing Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, ADFS, and related identity provider technologies
• Proven experience designing and implementing authentication integrations using SAML, OpenID Connect (OIDC), OAuth, and other federation protocols across large and complex application environments
• Extensive experience defining authentication standards, reference architectures, engineering patterns, and technical roadmaps while serving as a senior technical authority for authentication and identity services
• Hands-on experience implementing MFA, adaptive authentication, risk-based access controls, passwordless authentication, conditional access, and Zero Trust security principles within enterprise environments
• Demonstrated experience leading and owning security strategies, solutions, and/or initiatives, with proven ability to drive these efforts to successful completion
• Demonstrated ability to address complex production issues by troubleshooting applications and systems
• Experience with advising on security architecture, methods, and controls required to meet security, compliance, and audit requirements
• Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.)