IT Security Engineer III

OverviewThe Security Engineer III is a senior individual contributor responsible for designing, implementing, and continuously improving the organization’s cybersecurity infrastructure and security controls. This role provides technical leadership across security engineering, identity and access management, endpoint and data protection, cloud security, compliance, and threat prevention.The role owns the end-to-end lifecycle of security controls, from design and implementation through monitoring, validation, and continuous improvement. Working closely with Infrastructure, Applications, Retail Systems, Legal, Risk, HR, and business partners, the Security Engineer III is responsible for developing automation, integrations, and scalable solutions that enhance security effectiveness, improve efficiency, and reduce manual effort.The role reports to our Store Support Office in Phoenix, AZ, with a hybrid work arrangement requiring in-office presence Tuesday through Thursday. Overview of ResponsibilitiesSecurity Architecture & Engineering Design and implement enterprise security solutions across network, endpoint, cloud, identity, email, and data protection domains. Assess and enhance the organization's security architecture to address emerging threats and vulnerabilities. Configure and maintain secure system settings and hardening standards, including alignment to applicable benchmarks and best practices. Research, evaluate, and recommend new security technologies, tools, and proof-of-concept solutions. Integrate security controls into infrastructure and application deployments through partnership with cross-functional teams. Support cloud security initiatives across Microsoft Azure and related services. Security Operations & Threat Management Monitor security alerts, analyze logs, investigate threats, and coordinate remediation activities. Develop and implement response strategies for detected threats, minimizing business impact and reducing risk exposure. Serve as an escalation point for security incidents and security-related operational issues. Troubleshoot and resolve security technology failures and control gaps. Develop automation and integrations that improve monitoring, reporting, detection, and remediation capabilities. Identity, Endpoint & Data Protection Administer and maintain identity security controls, including SSO, SAML, SCIM, conditional access, MFA, and privileged-access management. Manage endpoint security technologies, including endpoint protection, privilege management, device compliance, and endpoint hardening. Oversee data loss prevention, email security, and information protection controls. Secure and enable enterprise AI/LLM adoption, including application discovery, data-egress and DLP controls for AI tools, and sanctioned-application enablement.Manage encryption, authentication, credential, key management, and enterprise secrets-management solutions. Conduct privileged account, service account, and access governance reviews. Security Governance, Risk & Compliance Support enterprise information security governance, risk, and compliance initiatives. Perform security assessments and recommend improvements to strengthen security posture. Execute recurring security controls and provide audit evidence for compliance reviews. Evaluate risks associated with vendors, suppliers, and third-party partners and recommend mitigation strategies. Assist with compliance activities aligned with applicable regulatory and security frameworks. Develop and maintain security policies, standards, procedures, and technical documentation. Security Leadership & Collaboration Lead security-focused projects and initiatives. Provide technical guidance and mentoring to other security team members. Drive security requirements through partner teams' implementation and change-management processes. Deliver security awareness and best-practice education to employees and stakeholders. Participate in a shared 24/7 on-call rotation as required. #LI-LM1QualificationsKnowledge Skills & AbilitiesBachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent combination of education and experience.5+ years of cybersecurity, information security, or related IT engineering experience.Demonstrated ownership of enterprise security platforms from design through implementation and operational support.Strong knowledge of security architecture, risk management, endpoint security, identity security, cloud security, and network security principles.Experience implementing and managing security technologies in enterprise environments.Strong understanding of network protocols, encryption standards, authentication technologies, and security best practices.Experience with security automation, scripting, API integrations, and operational efficiency initiatives.Knowledge of compliance and security frameworks such as NIST CSF, CIS Controls, and SOX-related controls.Strong analytical, troubleshooting, and problem-solving skills.Excellent written, verbal, and interpersonal communication skills.Ability to manage multiple priorities in a fast-paced environment.Preferred Technical ExperienceMicrosoft Azure (IaaS, PaaS, Entra ID, Exchange Online)Active DirectoryOkta or Microsoft Entra IDNetskope or comparable SASE/SWG/CASB platformsProofpoint or other secure email gateway solutionsCrowdStrike FalconBeyondTrust or equivalent Privileged Access Management toolsMicrosoft PurviewSIEM and security monitoring platformsIntune, Endpoint Manager, and Configuration ManagerWindows Server administrationWindows 10/11 endpoint managementServiceNow (ITSM/SecOps)PowerShell, Python, and REST API integrationsDevSecOps and CI/CD security practicesNetwork security technologies including firewalls, NAC, IDS/IPS, and Zero Trust architecturesPreferred CertificationsCISSP preferredGIAC certificationsMicrosoft Security certificationsCCSP, Security+, or equivalent industry certificationsITIL 4 knowledge preferredCore CompetenciesCommunicationCustomer FocusDriving for ResultsPositive ApproachBenefitsIn addition to a rewarding career, Sprouts offers a comprehensive program to help support you and your family. These programs include:Competitive paySick time plan that you can use to support you or your immediate families healthVacation accrual planOpportunities for career growth15% discount for you and one other family member in your household on all purchases made at SproutsFlexible schedulesEmployee Assistance Program (EAP)401(K) Retirement savings plan with a generous company matchCompany paid life insuranceContests and appreciation events throughout the year full of prizes, food and fun!Eligibility requirements may apply for the following benefits:Bonus based on company and/or individual performanceAffordable benefit coverage, including medical, dental and visionHealth Savings Account with company matchPre-tax Flexible Spending Accounts for healthcare and dependent careCompany paid short-term disability coveragePaid parental leave for both mothers and fathersPaid holidaysGet Paid Every Day!Sprouts Farmers Market offers DailyPay - if you’re hired as an eligible employee, you’ll be able to transfer the money you’ve already earned at no extra cost, and get it the next business day, for free. We offer DailyPay so you don’t have to wait for payday to access the money you’ve already worked for. With DailyPay, you can see how much you’ve made every day and you can transfer your money any time before payday. You can learn more by visiting .Why SproutsGrow with us!If you have a passion for inspiring people and a flair for fresh food, consider applying for a job at Sprouts! With a focus on customer service, our neighborhood grocery stores offer high-quality, farm fresh produce, natural meats, plenty of scoop-your-own bulk goods and much more in a fun, friendly, old-fashioned farmer’s market setting. Come grow your career in healthy living with a fast-paced, rapidly growing company and teams that pride themselves on empowering others along their journey.At Sprouts, we’re committed to fostering an inclusive, respectful, and caring workplace culture.Our Team Member Resource Groups (TMRGs) create spaces for connection, support, and growth. Every team member is welcome to join one or more of our five groups:Inspiring Women at SproutsRainbow Alliance at SproutsSabor at SproutsSoul at SproutsHonored to Serve at SproutsTogether, these groups celebrate diversity and empower our team to thrive.The above statements are intended to describe the general nature and level of the work being performed by people assigned to this work. This is not an exhaustive list of all duties, responsibilities, and requirements. Sprouts’ management reserves the right to amend and change duties, responsibilities, and requirements to meet business and organizational needs as necessary.Sprouts will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Chance in Hiring Ordinance.California Residents: We collect information in accordance with California law, please see here for more information.