IT Security Engineer - IAM , North Carolina NC , US

Building the people that build the world.

With platforms in HVAC and Detection and Measurement, SPX Technologies builds innovative solutions that enable a safer, more efficient, sustainable world. Through our RiSE talent development framework, we Reach, Identify, Strengthen, and Engage our employees to support them in their continued development. We're a global company of problem solvers, collaborators, and innovators, and our businesses build solutions that impact the world.

How you will make an Impact (Job Summary)

SPX is a diverse team of unique individuals who all make an impact. As an Information Security Engineer, IAM (Identity and Access Management) you will be responsible for designing, implementing, and maintaining our secure authentication and authorization services to support SPX business goals ensuring seamless and efficient access management across our systems.

This high-profile role requires broad technical expertise, business experience, and the ability to clearly and effectively communicate complex security topics to SPX personnel.

The primary goal of this role is to ensure the proper function of SPX Identity and Access Systems security technologies on a day-to-day basis.

What you can expect in this role (Job Responsibilities)

While each day brings new opportunities at SPX, your core responsibilities will be:

1. Design and Implement:

• Participate in architectural reviews of applications and technologies, both on premise and cloud based, related to identity and authentication.
• Design implementation of identity provisioning (e. g. HR as master) authentication and privileged access to support compliance with security policies.
• Implement SSO Integrations including configuration, customization, and integration with various applications and services (e. g. SCIM provision).
• Evaluate existing Authentication Services and Privileged Access. infrastructure and identify potential enhancements to optimize service performance, security, and scalability.
• Support penetration testing and development of remediation strategies
• Support M&A assessment, remediation and integration activities
• Author technical documents to define architecture and configuration, including processes and instructions to manage and support services

1. Operate and Support:

• Perform administration, management and support (provisioning/deprovisioning, patching, troubleshooting, Group Policies, backup/recovery, upgrades) of Identity and Authentication services and technologies to provide availability within agreed SLAs
• Implement Identity & Access changes to meet project and operational requirements following change management process to mitigate risk of service disruption
• Manage digital certificates (public certificates, workstations, self service, automation)
• Administer Privileged Access Management (just in time PAM, administrator MFA, password/key management/rotation)
• Process service desk tickets (incidents, requests, problems) to meet defined SLAs. Perform RCA (Root Cause Analysis) and prevent same incidents from occuring again
• Support internal/external auditing activities

• 5+ years technical IT experience in systems, networks, enterprise applications
• 3+ years of experience in security-related position in corporate IT environment
• 3+ years of hands-on experience integrating applications using industry standards such as SAML/OIDC/OAuth/SCIM/Kerberos/LDAP using Active Directory and Identity-as-a-Service solutions (preferred experience).
• Advanced working knowledge of Information Security technologies including Active Directory (Schema, OU design, replication, DC backup/restore) IDaaS ( MFA/SSO, SAML), SSL/TLS (key use, management), Digital Certificates (PKI), PAM (Privileged Access Management).
• Strong understanding of system level configuration management, general server administration, authentication technologies, network services/protocols and Applications (including Web and mobile).
• Understanding of access management concepts, on premise and cloud applications, especially Microsoft Windows Active Directory (security, groups, role membership)

• Expertise on authentication systems, Office 365, Azure, security hardening (CIS)
• Knowledge of Powershell Scripting and Group Policy (GPO) for Task Automation
• Excellent problem-solving abilities and analytical thinking
• Strong ability to handle multiple demands with sense of urgency and initiative
• Proven ability to execute projects independently and collaborate effectively with relevant stakeholders to achieve project/task completion.
• Excellent communication skills, both verbal and written

• Bachelor's degree in Information Technology or related field or the recognized equivalent in work experience or self-study (required)
• Microsoft Certification on Active Directory (MCSA, MCSE, MCITP:EA) (preferred)
• CISSP Certification (preferred)
• CompTIA Security+ (preferred)

• Travel up to 10%

• Generous and flexible paid time off including paid personal time off, caregiver, parental, and volunteer leave
• Competitive health insurance plans and 401(k) match, with benefits starting day one
• Competitive and performance-based compensation packages and bonus plans
• Educational assistance, leadership development programs, and recognition programs