Information Security Engineer

Job Description

Job Summary

At Westfield, we're modernizing identity at scale. We're looking for an Information Security Engineer with a strong focus on Identity & Access Management (IAM) and Single Sign-On (SSO) to help design, operate, and mature our enterprise authentication and federation capabilities.

This role sits at the intersection of security engineering, identity platforms, and application integration, partnering closely with application teams, infrastructure, and security stakeholders to deliver secure, scalable access across the enterprise.

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.

As part of our Information Security Engineering team, you will:

• Operate and enhance enterprise IAM and SSO platforms, supporting both internally developed and third-party applications
• Integrate applications using modern authentication and federation standards (SAML, OAuth, OIDC)
• Troubleshoot and remediate user-to-system and system-to-system access issues across web and cloud environments
• Support secure authentication and access control patterns, including MFA, RBAC, and privileged access use cases
• Partner with application teams to onboard new applications into SSO using established design patterns and standards
• Perform routine platform maintenance, upgrades, and configuration changes following change management best practices
• Monitor identity-related security events and support incident response activities when access-related issues arise
• Provide technical guidance to application and infrastructure teams on secure identity integration and access design
• Contribute to security standards, procedures, and documentation related to identity, access, and authentication

Job Qualifications

• 0-5 years of experience in Information Security or a related field.
• Bachelor's degree in Computer Science, Information Technology or a related field and/or commensurate experience.

Location

• Hybrid defined as three (3) or more days per week in the office.

Behavioral Competencies

• Certified Information Systems Security Professional
• Collaborates
• Customer focus
• Communicates effectively
• Decision quality
• Nimble learning

Technical Skills

• Security Engineering
• Firewall Management
• Threat Intelligence
• Network Security
• Incident Response
• Security Monitoring
• Vulnerability Management
• Identity Management
• Encryption Techniques
• Security Assessments
• Information Security

This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.