Engineer, Security & Identity

Reporting to the Director IT Operations the Security & Identity Engineer is the senior IT Operations staff member responsible for implementing maintaining and continuously improving the organizations cybersecurity and identity management capabilities across all enterprise systems. This position ensures the protection of organizational assets through secure access controls proactive threat detection and adherence to governance risk and compliance standards. The Engineer advances the organizations Zero Trust security model secures cloud and SaaS environments enables safe adoption of AI and automation and serves as the senior escalation point and design authority for all cybersecurity and identity matters. This position works cross-functionally with IT Operations Business Strategy & Analytics Baseball R&D and Risk Management to provide cybersecurity guidance. The Security & Identity Engineer shares Event and On-Call coverage responsibilities on a rotation with the IT team.

The Nationals are a military-friendly organization actively recruiting veterans and spouses.

Essential Duties and Responsibilities:

Security Architecture & Engineering (Core Function)

• Participate in the design implementation and operation of enterprise security architecture.
• Implement and maintain Zero Trust principles including identity-first controls and network segmentation.
• Secure cloud SaaS and hybrid environments through appropriate configuration and controls; evaluate and implement new security technologies.

Identity & Access Management

• Administer and manage identity platforms (e.g. Azure AD/Entra ID Okta SSO MFA conditional access).
• Design and enforce role-based and least-privilege access models.
• Manage and/or audit identity lifecycle processes including provisioning deprovisioning and access reviews.
• Implement and maintain privileged access management (PAM) controls.

Security Operations & Incident Response

• Monitor investigate and respond to security events and alerts across systems and platforms.
• Coordinate and participate in incident response activities including root cause analysis and remediation.
• Support implementation and tuning of security monitoring tools (SIEM endpoint protection etc.).
• Develop and maintain incident response procedures and playbooks.

Vulnerability & Risk Management

• Conduct recurring vulnerability assessments and security reviews identifying risks and driving remediation.
• Partner with relevant teams to remediate identified vulnerabilities.
• Track and report on risk posture remediation progress and security metrics.

Governance Compliance & Policy

• Enforce enterprise security policies standards and procedures; support audits compliance initiatives and regulatory requirements.
• Assist in the development and maintenance of security documentation baselines and guidelines.

AI SaaS & Data Security

• Implement controls to support secure AI adoption including data protection and access governance; ensure secure configuration and usage of SaaS platforms.
• Collaborate with Business Strategy & Analytics Baseball R&D and IT Operations to ensure security is embedded in new solutions.

Projects Change & Budget

• Develop and execute cybersecurity projects to completion discuss challenges and key decision points with IT Leadership.
• Participate in and drive the organizations change management process for all cybersecurity changes.
• Participate in the planning adherence and analysis of the cybersecurity portion of the operational budget; recommend security investments.
• Manage cybersecurity vendors; coordinate maintenance windows and resolve cybersecurity issues.

Collaboration Guidance & Reporting

• Generate and publish metrics reports and dashboards for IT Leadership.
• Provide guidance training and escalation support to the IT Operations team.
• Collaborate with internal departments vendors and external partners.

Event & On-Call Support

• Provide on-site Event and remote On-Call support on a shared rotation.

Governance Documentation & Standards

• Develop and maintain documentation including SOPs installation methodologies project plans and environment configurations.
• Adhere to all company and departmental policies procedures and operating standards.
• Other duties as assigned.

Compensation:

The projected annual salary range for this position is $100000 - $120000 per year. Actual pay is based on several factors including but not limited to the applicants qualifications skills expertise education/training certifications and other organization requirements. Starting salaries for new employees are frequently not at the top of the applicable salary range.

Benefits:

The Nationals offer a competitive and comprehensive benefits package that presently includes:

• Paid vacation and sick leave paid holidays throughout the year and a holiday break in December
• Medical dental vision life and AD&D insurance
• Short- and long-term disability insurance
• Flexible spending accounts
• 401(k) and pension plan
• Access to complimentary tickets to Nationals home games
• Employee discounts
• Free onsite fitness center

Equal Opportunity Employer:

The Nationals are dedicated to offering equal employment and advancement opportunities to all individuals regardless of their race color religion national origin sex age marital status personal appearance sexual orientation gender identity or expression family responsibilities matriculation political affiliation genetic information disability or any other protected characteristic under applicable law.

Required Experience:

IC