Cybersecurity Engineer II - Access Management

Employment Type: Full time

Position Overview

At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve. If you are ready to make a difference as part of the world’s greatest sports team, apply to join our team today!

The Cybersecurity Engineer II - Access Management (AM) will leverage their experience in supporting enterprise Identity & Access Management (IAM) platforms. This will have a special emphasis on Active Directory and Microsoft Entra capabilities, but will grow and evolve as technologies change and your career develops. As an AM Engineer, you will be responsible for supporting access management integrations, and frameworks that align with business needs. This role plays a crucial part in ensuring secure and efficient access management within the organization.

In this role, the candidate will join the Company with 3+ years of tangential or direct information security experience, with an IT background, and passion for cybersecurity. This is a technical role that requires knowledge across numerous technology disciplines. The role will support the business by working alongside other teammates to protect the Company, learning and using technologies to help detect and prevent cyberattacks, support various security-focused tools from both a growth and care-and-feeding standpoint, partner with third parties to evolve security capabilities, and leverage internal and external training to further hone skills. In addition to strong technical skills, the candidate is expected develop security technology documentation for both internal use and consumption by the larger Technology team. If you’re passionate about identity & access management and enjoy solving complex challenges, this role might be a great fit for you!

Job Duties & Responsibilities

• Serve as one of the company’s engineers in access management and support the effort to manage and support both an on-premises and cloud-based IAM solutions at the enterprise level.
• Fulfill access requests via JIRA.
• Assist in the development of access control frameworks including (RBAC, ABAC, PBAC, and others).
• Design and approve conditional access policies.
• Maintain security governance and policies for the business, groups, products, and security access types to ensure successful audit reviews.
• Assist in the review and update of cybersecurity identity & access management related policies, architectures, and standards.
• Assist in responding to audits, penetration tests, and vulnerability assessments.
• Partner with teammates across all of Technology.

Preferred Technical Skills

• Moderate understanding of Identity & Access Management principles and best practices.
• Strong Experience with Azure Active Directory/Entra ID, and related technologies.
• Experience with identity & access management (IAM) tools and frameworks.
• Some experience with Group Policy Management, Conditional Access Policies, PowerShell, Graph, Python, API integration.
• Security+, and/or related Entra/Azure IAM Certification(s).
• DevOps and application security best practices.
• Working knowledge of modern operating systems, application architecture, networking, virtualization, and/or containers.
• Understanding of native OS logging mechanisms, for example: syslog, Sysmon, Windows Event Logs, etc.

Qualifications

• 3+ years of related experience in Security Operations & Engineering, Windows, Linux, cloud, IAM, PAM, & access management.
• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, or equivalent preferred.

#LI-CB1

Targeted Pay Range

$67,100.00 - $109,000.00. This is part of a competitive total rewards package that could include other components such as: incentive, equity, and benefits. Individual pay is determined by a number of factors.