Information Security Engineer (Cybersecurity)

Job Title: Information Security Engineer (Cybersecurity)

Work Place Flexibility: Hybrid 

Legal Entity: Entergy Services, LLC 

***This position may be filled in The Woodlands, TX or Little Rock, AR. Other locations within Entergy's service territory may be considered - Texas, Arkansas, or Louisiana***

***This position will be filled as an Info Sec Engineer III-SR depending on the candidate’s qualifications and experience***

JOB SUMMARY/PURPOSE:

The Identity Management Systems Engineer assists in delivering Enterprise Identity Security access provisioning and authentication services for employees and vendors, Information Technology and Operational Technology, and with the capability to support cloud and on-premise platforms.  The Engineer executes on policies to ensure critical applications, systems and data are protected from unauthorized access while managing the identities and access rights of people both inside and outside the organization.

JOB DUTIES/RESPONSIBILITIES:

• Assist in executing on the strategy, roadmap and delivery plans for Identity and Access Management (IAM) Systems
• Day-to-day operations of IAM systems to create a successful identify program
• Assist with compliance activities to meet requirements of North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)
• Assist with establishing user identity, provisioning and de-provisioning access, access level changes, federation, etc.
• Assist with maintenance of IAM technology infrastructure, managing application and user-store integrations, directory capabilities, patching, upgrades, etc.
• Support the Enterprise Active Directory (AD) environment, Lightweight Directory Access Protocol (LDAP) services, virtual directory services (VDS) multi-factor authentication (MFA), federation services, privileged account management (PAM) and password management
• Support all system use of Role-Based Access Control (RBAC) for verifying and granting access to their resources

MINIMUM REQUIREMENTS

Minimum education required of the position

Associate degree in computer science, cyber security or a related discipline or equivalent work experience. 

Minimum experience required of the position

Info Sec Engineer III: 4 plus years of identity management experience or relevant experience

Info Sec Engineer, SR: 6 plus years of identity management experience or relevant experience

• Experience related to IAM skills/field: (i.e. provisioning and workflow, authentication and entitlements, role-based access controls (RBAC), data privacy, and IAM solutions) is a plus
• Exposure to IAM federated roles and responsibilities within corporate environments is a plus
• Exposure to federated identity and web services security concepts such as SAML, OAuth 2.0, OpenID Connect, OWIN and ID-WSF, WS-Federation, and WS-Security is a plus
• Experience with IAM technologies like Active Directory, LDAP, multi-factor authentication across different infrastructure topologies including external vendors is a plus
• Experience in supporting different topology models of IAM stack across cloud, on-prem, Multi-Data Centre with 100% availability of the service is a plus
• Experience working with outsourced teams is a plus

Minimum knowledge, skills and abilities required of the position 

• Awareness of modern Identity Management protocols and standards, frameworks, federation technologies and solutions

• Knowledgeable in Identity and Access Mgmt products with proven technical capabilities with those solutions
• Experience with enterprise directory solutions

• Some technical engineering and process management skills
• Understanding of security operations, access management, intrusion detection, and physical security
• Awareness of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
• Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL
• Good communication skills
• Good organizational and time management skills
• Able to work in partnership with colleagues (e.g. corporate security) throughout the IT organization, and in collaborative teams to achieve common goals

#LI-SB1

#LI-HYBRID

Primary Location: Arkansas-Little Rock Arkansas : Little Rock 
Job Function: Professional
FLSA Status: Professional 
Relocation Option:
Union description/code: NON BARGAINING UNIT 
Number of Openings: 1
Req ID: 116357
Travel Percentage:Up to 25%

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the EEI page, or see statements below.

EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. 

The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Entergy Pay Transparency Policy Statement: The Entergy System of Companies (the Company) will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company’s legal duty to furnish information.  41 CFR 60-1.35(c). Equal Opportunity and Pay Transparency.

Pay Transparency Notice:

Pay Transparency Nondiscrimination Provision (dol.gov)

The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment.  Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours.

WORKING CONDITIONS:
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Please note: Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.