Senior Cybersecurity Engineer II – Identity & Access Management (IAM)

Job Summary
The Senior Cybersecurity Engineer – Identity and Access Management (IAM) is responsible for designing, engineering, and continuously improving enterprise identity security capabilities that protect the organization while enabling a seamless user experience. This role serves as a senior technical contributor within the Information Security organization, partnering with infrastructure, application, cloud, architecture, and security teams to deliver scalable, secure, and resilient identity solutions across a complex enterprise environment.

This position requires a security practitioner first and an identity engineer second. The successful candidate will bring deep expertise in identity and access management, along with a broad understanding of enterprise technology, including cloud platforms, operating systems, networking, application architecture, automation, and cybersecurity principles. The engineer will evaluate existing practices, identify opportunities for improvement, and help advance enterprise identity capabilities through engineering, automation, and modern security design patterns.

As a senior individual contributor, this role requires a high degree of independence, technical ownership, and accountability. The engineer will lead technical initiatives, contribute to strategic direction, and collaborate across multiple teams while remaining hands-on with solution design, implementation, troubleshooting, and operational improvements. Success in this role requires sound technical judgment, strong communication skills, intellectual curiosity, and the ability to build productive relationships with stakeholders across the organization.

The ideal candidate embraces continuous learning, stays current with emerging technologies and industry trends, and enjoys solving complex security challenges through thoughtful engineering rather than adding unnecessary operational complexity. They are comfortable working in Agile environments, applying modern engineering and project management practices, and driving meaningful improvements that strengthen security posture, operational efficiency, and user experience.

Location: On site in Deerfield, Illinois

Work Schedule: Hybrid – Four days onsite per week and one day remote

Work Authorization & Sponsorship: Applicants must be legally authorized to work in the United States. Walgreens will not provide employment-based visa sponsorship for this position, now or in the future.

Job Responsibilities
Responsible for complex configuration, documentation, and maintenance of some of the organization’s information security architecture.

• Leads in designing, building, operating and automating key information security solutions and processes to protect the integrity of the organization's digital network, systems, applications and data.

• Consults with internal development teams to identify threats, advise on defensive coding strategies and remediate vulnerabilities in software. Meets and evangelizes with internal business partners and customers to develop information security requirements and conduct risk assessments.

• Provides technical leadership on security projects to solve challenging security problems.

• Participates in security risk analyses and reviews of third-party software, service providers and contracts.

• Stays current on evolving security and legislative / regulatory changes related to security.

• Proactively assesses potential items of risk and opportunities of vulnerabilities in the network and systems.

• Participates in developing technical / business approaches and new or enhanced technical tools. Has advanced in-depth knowledge of advanced security protocols and standards, vulnerability assessment tools, packet analyzers and security management suites, penetration testing tools and countermeasures and mitigation techniques applied to web applications.

• Ensures that threats and vulnerabilities to the organization’s business systems and applications (both in-house and cloud-based) are minimized.

• Installs & configures firewalls, intrusion detection systems, anti-virus software, and vulnerability scanning systems.

• Manages encryption protocols to protect the organization's data as well as management of authentication and access controls.

• Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes.

• Monitors overall compliance with security standards and conducts periodic security audits using techniques such as ethical hacking and penetration testing.

• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.

About Walgreens
Founded in 1901, Walgreens (www.walgreens.com) has a storied heritage of caring for communities for generations and proudly serves nearly 9 million customers and patients each day across its approximately 8,500 stores throughout the U.S. and Puerto Rico, and leading omni channel platforms. Walgreens has approximately 220,000 team members, including nearly 90,000 healthcare service providers, and is committed to being the first choice for retail pharmacy and health services, building trusted relationships that create healthier futures for customers, patients, team members and communities.

• Bachelor's degree and at least 4 years of experience in IT Security OR a High School Diploma/GED and at least 7 years of experience in IT Security
• At least 2 years of experience working with security protocols and standards, vulnerability assessment tools, packet analyzers, scripting languages and security management suites, penetration testing tools and countermeasures and mitigation techniques applied to web applications.
• Experience with security engineering, identity engineering security applications engineering and/or security infrastructure engineering
• Experience establishing & maintaining relationships with individuals at all levels of the organization, in the business community & with vendors.
• Experience with modern scripting languages and applicable application protocols and APIs.
• At least 2 years of experience contributing to financial decisions in the workplace.
• At least 2 years of direct leadership, indirect leadership and/or cross- functional team leadership.
• Willing to travel up to 10% of the time for business purposes (within state and out of state)

• Bachelor's degree in computer science, Information Technology, Engineering or Mathematics
• Experience analyzing and reporting data in order to identify issues, trends, or exceptions to drive improvement of results and find solutions.
• Experience identifying operational issues and recommending and implementing strategies to resolve problems.
• CISSP or CISA
• Demonstrated ability to modernize identity and access management (IAM) programs beyond traditional directory management and provisioning functions, with an emphasis on measurable security outcomes, automation, scalability, and user experience.
• Experience designing and implementing identity security capabilities across hybrid enterprise environments, including authentication, authorization, privileged access, identity governance, federation, and cloud-native identity services.
• Demonstrated success reducing manual operational processes through automation, orchestration, policy-driven controls, infrastructure as code (IaC), API-driven integrations, and engineering-first approaches to identity management.
• Experience establishing or maturing identity security capabilities involving non-human identities, service accounts, workload identities, secrets management, machine authentication, certificate-based trust models, or other emerging identity domains.
• Strong understanding of modern identity security principles, including Zero Trust, phishing-resistant authentication, adaptive access controls, least privilege, risk-based authorization, and identity threat detection.
• Demonstrated ability to balance security requirements with workforce productivity and customer experience by designing controls that strengthen security while maintaining usability.
• Experience contributing to long-term identity security strategies, evaluating emerging technologies, challenging legacy approaches, and influencing modernization roadmaps across large, complex enterprise environments.
• Hands-on experience with one or more enterprise identity management, identity governance, privileged access management, or authentication platforms, such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, ForgeRock, Duo, or similar technologies.
• Familiarity with modern identity standards and protocols, including SAML, OAuth, OpenID Connect (OIDC), SCIM, FIDO2, WebAuthn, and certificate-based authentication.
• Experience partnering with engineering, infrastructure, cloud, platform, application, and security teams to integrate identity controls into enterprise technology solutions rather than treating identity as a standalone operational service.
• Strong security engineering background, with the ability to assess threats, identify systemic weaknesses, and design sustainable security controls that improve organizational resilience.
• Interest in emerging identity security challenges, including workload identities, machine-to-machine trust, identity automation, agentic AI and AI-related identity controls, authorization modernization, and evolving enterprise identity architectures.
• Demonstrated experience challenging established practices, simplifying legacy processes, and leading identity modernization initiatives that deliver meaningful improvements in security, operational efficiency, automation, or user experience.

We will consider employment of qualified applicants with arrest and conviction records.
#LI-JW1