If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!
The Security Engineer – IAM is a mid-level role responsible for enhancing and evolving SECU’s IAM practices, processes, and solutions.
This individual will serve as a key technical resource, providing operational support, management, implementation, and strategic development of IAM solutions, including Privileged Access Management (PAM), Single Sign-On (SSO), Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Active Directory (AD), Customer Identity and Access Management (CIAM), and other IAM technologies.
The engineer will provide input and have some responsibility with designing and optimizing IAM frameworks, driving automation, and ensuring alignment with security best practices and compliance requirements.
Additionally, they will actively collaborate with cross-functional teams, mentor junior engineers, and work closely with key stakeholders to strengthen the adoption of IAM controls and solutions while contributing to the overall cybersecurity strategy.
Responsibilities:
(30%) Perform operational support and maintenance of technical security solutions to enhance SECU’s security posture.
(20%) Assist in the configuration and tuning of security tools and integrations with enterprise controls and tools.
(20%) Participate in identification of service quality, documentation, and operational efficiency and improvement opportunities.
(10%) Participate in on-call rotation and serve as a resource for technical support of information security technologies.
(10%) Mentor and collaborate with junior engineers.
(10%) Pursue and maintain additional skills and certifications commensurate with the role to remain current on advancing cyber security trends.
Responsibilities will include participation in special assignments and cross-functional initiatives as required.
Required Education & Experience (Knowledge, Skills, & Abilities):
Candidate must live in North Carolina or contiguous state.
Bachelors degree in Computer Science, Information Technology, Cyber Security, or related field.
Additional 2 years of relevant experience can be considered in lieu of degree.
Minimum 2 year of experience in related field.
General IAM Solutions
Experience supporting one or more IAM solutions such as PAM, SSO, Directory Services, IGA, CIAM, and MFA
Understanding of IAM Concepts
Demonstrated experience and understanding of core IAM principles, such as authentication, authorization, provisioning, and access control.
Demonstrated experience and understanding of identity lifecycle management (creation, modification, and deletion of user accounts).
Basic Programming/Scripting Skills
Ability to leverage and understand scripting languages such as Python, PowerShell, or Bash for automating tasks.
User and Role Management
Experience in managing user accounts, groups, roles, and permissions within an IAM system.
Security Awareness
Understanding of security principles, including least privilege, segregation of duties, and access reviews.
Incident Response and Troubleshooting
Ability to investigate and resolve access-related issues and incidents.
Experience with IAM-related logs and monitoring tools for diagnosing and fixing issues.
Ability to identify discrepancies or potential security risks in access control settings.
Communication Skills
Ability to document processes, policies, and procedures clearly and concisely.
Skills in communicating technical concepts to non-technical stakeholders.
Preferred Education & Experience (Knowledge, Skills, & Abilities):
Bachelors degree in Computer Science, Information Technology, Cyber Security, or related field.
Preferred 2-5 direct years of experience.
Ability to manage role-based access control (RBAC) policies.
Experience working in cross-functional teams, including IT, security, and compliance.
Ability to collaborate with stakeholders to understand access requirements and implement them effectively.
Experience working within a DevOps environment.
Professional certifications such as: CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications.
Work Environment & Physical Requirements:
Computer for prolonged periods
SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
Disclaimer
State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.
Skills Required
- Candidate must live in North Carolina or a contiguous state
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field (or additional 2 years relevant experience in lieu of degree)
- Minimum 2 years of experience in a related field
- Experience supporting IAM solutions such as PAM, SSO, Directory Services, IGA, CIAM, and MFA
- Demonstrated understanding of core IAM principles (authentication, authorization, provisioning, access control)
- Experience with identity lifecycle management (creation, modification, deletion of user accounts)
- Basic programming/scripting skills (Python, PowerShell, Bash) for automation
- Experience managing user accounts, groups, roles, and permissions within an IAM system
- Understanding of security principles including least privilege, segregation of duties, and access reviews
- Ability to investigate and resolve access-related incidents; experience with IAM logs and monitoring tools
- Ability to document processes, policies, and procedures and communicate technical concepts to non-technical stakeholders
- Preferred 2-5 years of direct relevant experience
- Ability to manage role-based access control (RBAC) policies
- Experience working in cross-functional teams (IT, security, compliance)
- Experience working within a DevOps environment
- Professional certifications such as CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or intent to obtain
SECU Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about SECU and has not been reviewed or approved by SECU.
-
Retirement Support — Immediate 100% vesting and a 200% employer match on employee 401(k) contributions from 1–5% of pay (up to a 10% employer match) stand out. This level of support is described as unusually rich among financial‑services employers.
-
Leave & Time Off Breadth — 11 paid holidays plus 16 floating‑holiday hours, paid parental and caregiver leave, bereavement and volunteer time, and PTO that can reach 32 days per year with carryover up to 280 hours. These provisions provide predictable time off and flexibility across life events.
-
Healthcare Strength — Medical (PPO or HDHP) with HSA/FSA options, dental including a minor‑child orthodontia option, and vision are available for employees and eligible dependents. Employer‑paid basic life/AD&D and short‑term disability, with subsidized long‑term disability, add robust income protection.
SECU Insights
What We Do
Even though we're North Carolina's largest credit union, we're still just "people helping people." We currently serve over 2.6 million members through more than 270 branch offices - and growing! Members have 24/7 access to account services from over 1,100 ATMs, as well as via phone, our website, and the SECU Mobile App. Since 1937, we've provided financial services to employees of the State of North Carolina, public boards of education, and employees of associations formed for the benefit of State employees, as well as their immediate family members. We are the trusted provider of financial services for millions of members. And, according to Forbes Magazine, we're the best credit union in North Carolina. State Employees' Credit Union (SECU) is an Equal Housing Opportunity lender and federally insured by NCUA. SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
