Information Security Engineer

Senior Information Security EngineerAs Senior Information Security Engineer, you will design, build, and run core security solutions that support all information security capabilities and products. You will also provide operational support to security-related Kohl's Technology processes, including firewall rule request approvals, proxy allow/deny listing and application allow/deny listing.What You'll DoProvide architectural design, engineering maintenance and application administration for the Information Security tool suiteResearch, test and advise on new technology and security requirementsDesign, develop, test, deploy and iteratively improve product capabilities and features in collaboration with designers, product managers and other engineers on the product teamLeverage critical thinking, experimentation, data and industry best practices to achieve desired business outcomesDevelop high-quality applications that are secure, easy to operate, difficult to break, and extremely observable with measurable resultsOversee all technical aspects of the product application lifecycle, including code, infrastructure, data, security, and CICDContribute to product engineering and software standardExpand experience across domains within the roleAdditional tasks may be assignedWhat Skills You HaveRequiredDeep experience designing and operating enterprise Identity and Access Management (IAM) platforms, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), federation, and modern authentication protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and related identity standardsHands-on experience implementing and supporting enterprise secrets management and machine identity solutions, including credential lifecycle management, privileged access patterns, application authentication, certificate management, and secrets automation at scaleExperience with Identity Governance and Administration (IGA) platforms, including identity lifecycle management, access request and approval workflows, birthright and role-based access provisioning, certification campaigns, segregation of duties, and compliance reportingExperience with complex application troubleshooting, performance tuning and integration platforms or frameworksBackground in integrating with large SaaS systems, migrating on-prem systems to cloud solutions and developing integration frameworksAbility to execute integration testing strategiesPreferredExperience as a software developer