Security Engineer - IAM

Costco IT is responsible for the technical future of Costco Wholesale, the third largest retailer in the world with wholesale operations in fourteen countries. Despite our size and explosive international expansion, we continue to provide a family, employee centric atmosphere in which our employees thrive and succeed. 

This is an environment unlike anything in the high-tech world and the secret of Costco’s success is its culture. The value Costco puts on its employees is well documented in articles from a variety of publishers including Bloomberg and Forbes. Our employees and our members come FIRST.  Costco is well known for its generosity and community service and has won many awards for its philanthropy. The company joins with its employees to take an active role in volunteering by sponsoring many opportunities to help others.

Come join the Costco Wholesale IT family. Costco IT is a dynamic, fast-paced environment, working through exciting transformation efforts. We are building the next generation retail environment where you will be surrounded by dedicated and highly professional employees.

Security Engineers develop, design, implement, and integrate security systems used to safeguard enterprise assets against cyber attack. Security Engineers drive innovation, influence delivery, and maximize performance. They deliver high quality artifacts, develop and run security tests and continuously tune security tools for optimization.  Security Engineers identify gaps and inefficiencies and work with the business to implement solutions based on their requirements.

The Security Engineer will perform development work across the Identity and Access Management stack (both front-end and back-end expertise). The ideal candidate will demonstrate the ability to manage the completion of projects that involve databases, back-end services, and OO/UI development. The individual will design, build, enhance, and implement solutions in a fast-paced Agile environment, participating in scrum ceremonies and working closely with a highly motivated team.

If you want to be a part of one of the worldwide BEST companies “to work for”, simply apply and let your career be reimagined.

ROLE

 ●      Supports Systems Architects with the design of the overall architecture of a specific product/application, applying principles that promote availability, reusability, interoperability, and security into the design framework.

●      Performs development, optimization, and automation activities to support the implementation of a product/application.

●      Increases proficiency and understanding of relational and non-relational databases, distributed application architectures, user interfaces and user experience, quality assurance, security concerns, and business value creation.

●      Adopts engineering best practices to deliver higher quality and scalable solutions.

●      Provides the team with the development strategy, solution recommendations, and estimates for a given product/application.

●      Participates in scrum ceremonies (sprint planning, retrospective, showcases/demos, stand-ups, backlog refinement, etc.).

●      Creates and executes unit tests which validate the code changes made to support the implementation of a user story..

●      Identifies deficiencies within a product / application’s code-base and identifies opportunities to improve overall code quality.

●      Works with team members to move user stories from the development backlog into testing and provides clarification when needed.

●      Validates system configurations to ensure the safety of information systems assets and protects information systems from intentional or inadvertent access or destruction.

●      Implements best practice when applying knowledge of information systems security standards/practices (e.g.access control and system hardening, system audit and log file monitoring, security policies, and incident handling).

●      Estimates, plans, and manages all implementation tasks and reports on development progress.

●      Collaborates with team members to define project specifications and release documentation for all phases of the product development cycle, from product definition to design, through implementation.

●      Conducts peer code reviews for the software changes made by other engineers within a team.

REQUIRED

●      Minimum 5+ year’ experience on .net c#, JS, Java SDLA.

●      Minimum 5+ years experience of OOP design and implementation.

●      Minimum 5+ years experience with SQL, Non-relationship databases.

●      Application development in Azure, .Net, and C#, Kubernetes, Microservices, Containerized technologies.

●      Experience with CI\CD, OpenShift and docker, familiar with yml files.

●      Experience on building and integrating REST APIs, GraphQL, familiarity with A/B testing.

●      Demonstrates a strong understanding of emerging technologies to support the development of new solutions.

●      Strong verbal and written communication skills, and ability to communicate to both technical and business audiences.

●      Demonstrated ability to execute against iteration plans and deliver assignments within scope, schedule, and budget.

●      Ability to work with all management levels.

●      Ability to work with little supervision, positive attitude, conscientiousness, self-motivation, and willingness to do what it takes to make the team successful.

●      Team player, good interpersonal and communication skills. Creative, likes challenges.

●      Strong organizational and time management skills with ability to multitask and prioritize work effectively in a fast-paced working environment.

●      Ability to be extremely responsive and work under pressure in crisis with a strong sense of urgency.

●      Responsible, conscientious, self-motivated, and able to work with limited supervision.

●      Detail-oriented, possess strong problem-solving skills, and ability to analyze potential future issues.

●      Scheduling flexibility to meet the needs of the business, including weekends, holidays, and 24/7 on call responsibilities on a rotational basis.

Recommended

 ●      5-10 years’ experience in:

○      Implements applications and integrate with existing systems using containerized services.

○      Experience with cloud systems like Azure or GCP.

○      Experience with Active Directory, SAML Authentication, AAD, Sailpoint, Ping, Silverfort.

○      Application development in *ABAP, Java, JavaScript, React JS, .Net.

○      Working knowledge of databases (SQL, Cosmos.).

○      GitHub, CI/CD pipelines, OpenShift.

○      Programming with related technology such as XML, Java, various JavaScript frameworks, and SQL queries.

●      Proficient in Google Workspace applications, including Sheets, Docs, Slides, and Gmail.

Required Documents

●      Cover Letter

●      Resume

California applicants, please click here to review the Costco Applicant Privacy Notice.

Pay Ranges: 

Level SR.  - $150,000 - $190,000, Bonus and Restricted Stock Unit (RSU) eligible 

Level STAFF  - $180,000 - $225,000, Bonus and Restricted Stock Unit (RSU) eligible

We offer a comprehensive package of benefits including paid time off, health benefits - medical/dental/vision/hearing aid/pharmacy/behavioral health/employee assistance, health care reimbursement account, dependent care assistance plan, short-term disability and long-term disability insurance, AD&D insurance, life insurance, 401(k), stock purchase plan to eligible employees.

Costco is committed to a diverse and inclusive workplace. Costco is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or any other legally protected status. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to IT-Recruiting@costco.com

If hired, you will be required to provide proof of authorization to work in the United States.