Cybersecurity Staff Engineer

Position Purpose: At SRS, the Identity & Access Management (IAM) team plays a critical role in strengthening enterprise cybersecurity by enabling secure, scalable, and compliant access across cloud, on-premises, and customer-facing systems. We are seeking a Cybersecurity Staff Engineer – IAM to provide technical leadership for enterprise identity platforms and services, with primary focus on Okta, Microsoft Entra ID, and enterprise directory services. This role will lead strategic IAM initiatives including authentication modernization, identity integrations, automation, and M&A identity transformation efforts while supporting secure and seamless access across the enterprise. The ideal candidate will bring strong experience in enterprise IAM architecture, Okta Workforce Identity, authentication and federation technologies, identity lifecycle management, workflow automation, API integrations, and large-scale identity migration initiatives. Key Responsibilities: Serve as the technical and functional lead for Okta SSO, MFA, Universal Directory, Lifecycle Management, Microsoft Entra ID, and Active Directory platforms across enterprise environments. Lead the architecture, engineering, and integration of IAM solutions across cloud and on-premises systems. Design and implement scalable authentication, federation, and authorization solutions using SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, and SCIM. Design and implement IAM automation workflows and REST API integrations using Okta Workflows, Postman, PowerShell, Python, or similar technologies. Lead onboarding and integration of SaaS and enterprise applications into Okta using SSO, MFA, lifecycle management, and provisioning capabilities. Manage hybrid identity environments and integrations between Okta, Entra ID, Active Directory, cloud platforms, and enterprise applications. Develop adaptive authentication workflows, contextual access controls, phishing-resistant MFA, and passwordless authentication solutions. Partner with application owners, enterprise architects, cybersecurity, infrastructure, HR, and business teams to deliver secure and compliant identity solutions. Lead IAM activities supporting mergers, acquisitions, and divestitures, including identity integration, tenant consolidation, domain migrations, access transition planning, and identity migration strategies. Assess inherited IAM architectures and support application and user migration activities while ensuring secure access continuity and compliance. Provide functional leadership and governance for authentication, federation, provisioning, synchronization, and enterprise access management services. Drive the technical roadmap for Okta and enterprise directory services aligned with cybersecurity, compliance, and Zero Trust initiatives. Support audit, compliance, and regulatory requirements related to Okta and enterprise directory services. Required Qualifications: 8+ years of experience in Identity & Access Management (IAM), Cybersecurity Engineering, or a related field. 7+ years of hands‑on experience with Okta, Microsoft Entra ID (Azure AD), and Active Directory. Deep expertise in SSO, MFA, federation, identity lifecycle management, and authentication technologies. Strong experience integrating enterprise and SaaS applications using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP. Strong experience supporting Okta SSO, MFA, Universal Directory, and Lifecycle Management. Experience managing hybrid identity environments integrating Entra ID and Active Directory. Advanced experience with REST APIs, API integrations, and testing tools such as Postman. Strong experience building IAM automation workflows using Okta Workflows, PowerShell, Python, or similar technologies. Experience supporting IAM integration activities for mergers, acquisitions, and divestitures (M&A). Excellent communication and stakeholder management skills. Strong troubleshooting, analytical, and problem‑solving skills. Ability to lead technical initiatives independently in a hybrid work environment. Direct Manager Direct Reports: The Cybersecurity Staff Engineer will report directly to the Cybersecurity Sr. Manager, maintaining a strategic focus on protecting sensitive data and critical assets. This role does not have any direct reports. The Staff Engineer will execute initiatives in collaboration with cross‑functional teams, ensuring alignment with organizational security objectives. Responsibilities include designing and implementing security solutions, facilitating vulnerability management programs, and contributing to the development of security monitoring systems. The position emphasizes leadership through mentoring and guidance within the cybersecurity sphere. Experience in cybersecurity, computer science, or engineering is required, with a preference for candidates possessing over eight years of relevant experience. Travel Requirements: The Cybersecurity Staff Engineer in the company may be required to travel up to 20% of the time to support enterprise‑wide cybersecurity initiatives, collaborate with cross‑functional teams, and engage in strategic planning sessions. Physical Requirements: The Cybersecurity Staff Engineer role within the company primarily involves activities typical of an office‑based setting. This includes the ability to remain in a stationary position for extended periods, operate standard office equipment such as computers and telephones, and communicate effectively in written and verbal forms. The role may require occasional movement around the office to collaborate with team members or attend meetings. Working Conditions: The Cybersecurity Staff Engineer role within the company offers a dynamic and adaptable working environment designed to support the efficient and secure management of sensitive data and critical assets. This position may involve a combination of office‑based and remote work, depending on project demands and organizational requirements, thereby promoting a balanced and flexible work structure. The role operates in a fast‑paced, deadline‑driven context, necessitating the ability to swiftly adapt to new challenges and technologies in the cybersecurity landscape. The ideal candidate will thrive in a setting that prioritizes strategic security initiatives across architecture, governance, identity and access management, and other critical areas. The ability to drive engagement, manage conflict, and deliver on execution plans is essential, as is a commitment to continuous development and mentorship. In collaboration with Enterprise Technology, you'll play a pivotal role in configuring and integrating cybersecurity systems to effectively mitigate risks and optimize security operations. Minimum Qualifications: Minimum Qualifications for Cybersecurity Staff Engineer Required Experience and Educational Background: A bachelor's degree in Cybersecurity, Computer Science, Engineering, or a closely related field. Equivalent work experience may be considered in lieu of a formal degree. Minimum of 8 years of experience in cybersecurity or a related domain demonstrating progressive responsibility and technical expertise. Technical Proficiencies: Demonstrated ability to write code or scripting for the purposes of automation, monitoring, and testing security systems and protocols. Proven experience in designing, reviewing, and executing security solutions aimed at protecting enterprise‑level systems and assets. Comprehensive understanding of configuring and integrating cybersecurity systems in collaboration with enterprise technology teams to effectively mitigate risks. Proficient in developing, testing, deploying, and operationalizing security monitoring, assessment, and response solutions to address both current and emerging threats. Skills and Competencies: Robust ability to lead, mentor, and provide guidance to other team members while advocating for professional development within the team. Experience in facilitating vulnerability management programs across various systems, networking, and engineering teams, ensuring comprehensive risk assessment and mitigation. Skill in driving engagement across diverse cross‑functional teams to achieve strategic cybersecurity goals. Strong capability in managing conflict and aligning plans to deliver effective execution of security strategies. Outcome-Driven Abilities: Capacity to drive strategic initiatives aimed at enhancing the protection of sensitive data and critical assets, maintaining the highest standards of security for associates and consumers. Competence in managing and aligning cybersecurity operations with organizational objectives, ensuring the protection of essential infrastructure. Candidate Expectations: Candidates fulfilling these qualifications will demonstrate strong capabilities in securing and safeguarding corporate assets, consistent with the standards of a trusted Fortune 50 company. Preferred Qualifications: Advanced Technical Expertise: Proven experience with advanced cybersecurity frameworks, methodologies, and protocols. Proficiency in languages such as Python, Java, or C++, with a strong aptitude for scripting to automate cybersecurity tasks. Extensive knowledge of cloud security environments, with hands‑on experience in AWS, Azure, or Google Cloud Platform. Strategic and Analytical Skills: Demonstrated ability to conduct thorough risk assessments and develop strategic mitigation plans. Strong analytical skills to interpret complex technical information and translate it into actionable insights. Experience in designing and implementing cutting‑edge security architectures and solutions. Leadership and Mentoring: Track record of leading high‑performance teams and mentoring junior engineers in cybersecurity best practices. Experience in managing cross‑functional teams and driving large‑scale security projects to successful completion. Collaborative and Communication Proficiency: Excellent interpersonal and communication skills to effectively engage with stakeholders at all organizational levels. Experience in collaborating with enterprise technology teams to identify, integrate, and implement security tools that align with organizational objectives. Compliance and Risk Management: Solid understanding of regulatory requirements and industry standards such as GDPR, HIPAA, and NIST. Expertise in developing and executing comprehensive vulnerability management programs across diverse infrastructures. Innovation and Problem Solving: Demonstrated ability to innovate and adapt in a dynamic technological landscape, addressing both current and emerging cybersecurity threats. Strong problem‑solving skills with a proactive approach to identifying and resolving complex security challenges. Preferred Education: Master's degree in Cybersecurity, Computer Science, Engineering, or a related field is highly desirable, reflecting a commitment to advanced knowledge and expertise in securing enterprise environments. Certifications: Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA) Certified Cloud Security Professional (CCSP) GIAC Security Expert (GSE) Competencies: Strategic Problem Solving – Drive the design, review, and execution of solutions to protect enterprise-level systems. Provide strategic insight to developing and optimizing cybersecurity solutions that address both current and emerging threats. Leadership and Mentoring – Lead teams by example, providing guidance and mentorship to foster professional growth among team members. Develop others by sharing knowledge, facilitating skill development, and empowering colleagues to achieve cybersecurity objectives. Technical Proficiency – Utilize cybersecurity technical expertise to write code or scripts for automation, monitoring, and testing purposes. Employ advanced technical skills in configuring and integrating systems cybersecurity systems in collaboration with enterprise technology teams. Collaboration and Partnership – Collaborate with internal teams, such as Networking and Engineering, to facilitate vulnerability management programs and integrate security solutions. Foster partnerships across the organization to enhance overall cybersecurity posture. Effective Communication – Clearly convey complex cybersecurity concepts and strategies to diverse stakeholders, ensuring alignment on security initiatives and facilitating informed decision‑making. Operational Excellence – Deliver consistent execution of security monitoring, assessment, and response solutions. Align projects with strategic plans to optimize security service operations and enhance risk mitigation measures. Conflict Management and Resolution – Manage and resolve conflicts effectively within teams or projects to maintain focus on cybersecurity goals and ensure the smooth execution of initiatives. Risk Assessment and Advisory – Conduct thorough risk assessments and provide advisory services that proactively address security vulnerabilities and compliance issues, aligning with governance frameworks and strategic security planning. Benefits: Competitive weekly/bi-weekly pay, discretionary bonuses, 401(k) with company match, Employee Stock Purchase Plan Paid time off (vacation, sick, volunteer, holidays, birthday, floating) Medical/dental/vision Flexible spending accounts Company-paid life and short-term disability, plus optional long-term disability, and additional life insurance Additional Benefits: Competitive salaries for all team members paid weekly 401(k) Retirement Plan with company matching Employee Stock Purchase Plan Paid Vacation, Sick Time, Holidays, Birthday, and Floating Holidays Paid Parental Leave Medical, Dental and Vision Benefits Flexible and Dependent Care Spending Accounts Company paid Life insurance and Short-Term Disability Additional Life Insurance and Long-Term Disability also offered Safety Program with Bonuses for our Drivers Employee Referral Bonus Program Job Location: SRS Distribution - McKinney 7440 State Highway 121 McKinney, TX 75070-3104 As an Equal Employment Opportunity (EEO) employer SRS Distribution Inc., including all its subsidiaries, provides job opportunities to qualified individuals without regard to actual or perceived race, color, creed, religion, national origin, sex, gender, age, disability, gender identity, sexual orientation, citizenship status, uniform service, veteran status, marital status, genetic information, physical or mental disability, or any other characteristic in accordance with applicable federal, state, and local EEO laws. If you are an individual with a disability or a disabled veteran and require a reasonable accommodation in applying for any posted position, please contact Human Resources at US: View phone number on click.appcast.io, or by email to: View email address on click.appcast.io with the nature of your accommodation request and include the Business name, location and title of the job opening. Please allow one (1) business day for a reply. All employment offers are contingent upon successful completion of a background check and drug screen, as permitted by law. About SRS Distribution Inc.: SRS Distribution Inc., a wholly owned subsidiary of The Home Depot, consists of a family of industry‑leading, independent roofing distributors. SRS has grown rapidly through acquisitions and the opening of multiple new locations since the February 2008 inception. This continual growth has established SRS as one of the fastest growing building products distribution companies in the U.S. The goal of SRS is to form the strongest national network of independent roofing and building product distributors with the most talented team of people working together to deliver the industry's best products and services. In addition to our commitment to customer focus, SRS strives to become the preferred employer in the industry with highly motivated and engaged employees operating in an entrepreneurial culture where the corporate office works for the field and not the reverse. Find out more at #J-18808-Ljbffr SRS Distribution Inc.