Engineer - Cyber Security

Overview

This role is HYBRID out of our IRVING, TX tech office

This position is responsible for the design, build, support, and maintenance of the JML (Joiner/Mover/Leaver) lifecycle of Identity and Access Management (IAM) as a fundamental discipline of Cyber Security. Select, implement, and administer IAM systems/process, based on information security governance, organizational priorities, and company policies; primarily within the Microsoft Azure Cloud Platform.

Responsibilities

• Function as a Microsoft Azure Security Engineer; implement and manage best-practice security controls within Microsoft Entra ID including role-based access, protection, governance, and permission management.
• Strengthen core IAM principles by modernizing and creating advancements in Microsoft Azure with Privileged Identity Management (PIM), Just-In-Time (JIT) access, Conditional Access Policies, along with other secret/credential management technologies and concepts.
• Develop application identity management lifecycles for machine/nonhuman software workload identities, including Managed Identities, Service Principals, Encryption/API Keys, and others.
• Onboard, support, and migrate applications to utilize Single-Sign-On (SSO) and System for Cross-Domain Identity Management (SCIM) synchronization for automatic user provisioning/deprovisioning. Integrate applications with (Identity, Governance, and Administration) IGA tools and Service Management for related application access fulfillment.
• Provide user and group management services, and leverage latest authentication technologies and factors for end-to-end authentication flows.
• Perform operation and administration of security software which includes but is not limited to, On-premises and Coud-Based Identity providers (IdPs), IGA Tooling, Microsoft Entra Connect Sync, Microsoft Entra Cloud Sync, Azure Key Vault, CyberArk Privilege Cloud, Security Orchestration tools, Maintenance scripts, and In-House/Custom Services/Integrations/Automations, among others.
• Respond to and resolve IAM and security-related incidents, including off hours on-call incident resolution identified as high priority. This requires 24x7 availability during the on call rotation. The frequency will be dependent upon the number of associates in the rotation.
• Participate in security incident response efforts to include remediation with an appropriate sense of urgency and criticality. Perform effective research for issues of actual or suspected security violations, fraud, or abuses.

Qualifications

• Proficiency and ability to function as a Microsoft Azure Security Engineer with a focus on Microsoft Entra ID.
• Practical experience with identity-related technologies such as Single-Sign-On (SSO) and System for Cross-Domain Identity Management (SCIM) synchronization.
• Strong security knowledge around multi-factor authentication practices, and related protections for users, secrets, services, applications, and resources.
• General understanding of cloud security best practices.

MINIMUM QUALIFICATIONS:

• Microsoft Azure Security Engineer Certification (AZ-500) or equivalent, demonstrable experience
• Minimum of 2 years experience with Microsoft Entra ID.
• Software development proficiency in using application programming interfaces (APIs), including the Microsoft Graph API, generic/REST APIs, proprietary user management APIs/endpoints, and related operations with JSON objects.
• Proficiency with script-based languages including, but not limited to, PowerShell and Python.

PREFERRED

• Experience creating Azure Logic Apps and/or Azure Functions
• Experience with continuous integration and continuous development pipelines including integration with Azure Key Vault

• Familiarity with *nix-based systems including AIX, iSeries, and Linux distributions, including familiarity with SSH
• Experience with database systems and the SQL language, Microsoft SQL Server preferred.

#LI-RD1

Benefits

The annual base salary range is $63000 -$100000 / year. This range represents the anticipated low and high end of the salary for this position. Salary will be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. Salary is one component of the Foot Locker, Inc. total compensation package, which includes the below.

Foot Locker Benefits:

• Employee Discount
• Paid Time Off
• Medical | Dental | Vision Coverage
• 401(k) | Roth 401(k)
• Stock Purchase Plan
• Life Insurance
• Flexible Spending Account
• Opportunities for Advancement
• Tuition Reimbursement for Qualified Courses
• Strong Company Culture
• Employee Resource Groups