[Remote] Senior Security Engineer, Platform and IAM Support

Note: The job is a remote job and is open to candidates in USA. Victoria’s Secret & Co. is a world-leading specialty retail brand recognized globally for innovation and excellence in lingerie and fashion. They are seeking a Senior Identity and Access Management (IAM) and Platform Engineer to design, implement, and maintain secure identity and access solutions while collaborating with engineering teams to ensure robust access controls and facilitate quick and safe operations.ResponsibilitiesDesign and implementation of identity and access management solutions, including federated identity, SSO, RBAC, and lifecycle managementCollaborate on the integration of IAM with cloud platforms (e.g., AWS, Azure), SaaS applications, and internal servicesPartner with security, DevOps, and application teams to enforce least privilege access, auditability, and complianceBuild and maintain platform tooling to manage secrets, certificates, authentication, and authorization flowsAutomate IAM provisioning and de-provisioning using infrastructure-as-code and CI/CD pipelinesParticipate in incident response and root cause analysis related to identity or platform infrastructureCollaborate with lead engineers on operational support of security tools (Email Security, SASE, EDR, SIEM, etc.)Collaborate with lead engineers to integrate security best practices into CI/CD pipelines and cloud infrastructure (Azure, GCP)Assist in securing container platforms (e.g., Kubernetes, Docker) and infrastructure as code (Terraform, CloudFormation, etc.)Participate in threat modeling and security reviews of new infrastructure componentsStay current with industry trends and threat landscapes related to identity security and platform resilienceCollaborate with SOC and security analysts to investigate IAM-related incidentsDevelop scripts and automation (e.g., Python, PowerShell) to enhance identity workflows and platform securityMonitor system logs, access events, and security alerts from IAM and cloud platformsMaintain documentation for IAM processes, security controls, and supported systemsSkills6+ years related cybersecurity experienceExperience with SailPoint ISE, CyberArk, PingIdentity, Directory Services, EntraADUnderstanding of networking applications and multiple platformsDemonstrated knowledge of security controls in relation to authentication, authorization, privilege access management, identity governanceCustomer Service orientationUnderstanding of security controls and how they are used to detect and respondAbility to communicate technical issues to non-technical audiences across functionsAbility to assess/evaluate/prioritize riskAbility to lead small (sometimes cross functional) teams/projects/programsDemonstratable shell scripting abilities. Bash, python, Powershell, .Net, JavaDeep expertise in IAM technologies such as PingIdentity, Azure AD, GCP, or similar systemsStrong understanding of authentication protocols (OAuth2, OIDC, SAML) and access control models (RBAC, ABAC, PBAC)Proficiency in infrastructure-as-code (Terraform, Pulumi) and automation toolingExperience with CI/CD systems (e.g., GitHub Actions, GitLab CI, Jenkins) and secrets management tools (e.g., CyberArk, HashiCorp Vault, Azure Secrets Manager)Solid background in cloud infrastructure (Azure, or GCP) and container orchestration (Kubernetes preferred)Familiarity with regulatory and compliance requirements (e.g., SOX, PCI) and how they relate to IAMExperience prioritizing work and/or managing a queueBachelor's degree in Information Technology/Information Security or equivalent experienceCompany OverviewVictoria’s Secret & Co. It was founded in 1977, and is headquartered in Columbus, Ohio, USA, with a workforce of 10001+ employees. Its website is https://www.victoriassecret.com/.