Platform Engineer - Security

Job description

Since 1869, we've connected people through food they love. We’re proud to be stewards of amazing brands that people trust. Our portfolio includes the iconic Campbell’s brand, as well as Cape Cod, Chunky, Goldfish, Kettle Brand, Lance, Late July, Pacific Foods, Pepperidge Farm, Prego, Pace, Rao’s Homemade, Snack Factory, Snyder’s of Hanover. Swanson, and V8. Here, you will make a difference every day. You will be supported to build a rewarding career with opportunities to grow, innovate and inspire. Make history with us. Why Campbell’s… Benefits begin on day one and include medical, dental, short and long-term disability, AD&D, and life insurance (for individual, families, and domestic partners). Employees are eligible for our matching 401(k) plan and can enroll on the first day of employment with immediate vesting. Campbell’s offers unlimited sick time along with paid time off and holiday pay. If in WHQ – free access to the fitness center. Access to on-site day care (operated by Bright Horizons) and company store. Giving back to the communities where our employees work and live is very important to Campbell’s. Our “Campbell’s Cares” program matches employee donations and/or volunteer activity up to $1,500 annually. Campbell’s has a variety of Employee Resource Groups (ERGs) to support employees. How you will make history here... The Campbell's Company is looking for a senior level Security Engineer to join our critical and highly visible Information Security team. This position will primarily be responsible for managing the lifecycle and effectiveness of key security tools and processes. You will work closely with the Architecture and Risk Management teams to ensure that security controls are in place and appropriately managing risk throughout the Information Technology, Operational Technology, and Cloud environments. What you will do… Essential responsibilities will include but not be limited to: Design, deploy, integrate, and support enterprise security technologies, including Privileged Access Management (PAM), Identity and Access Management (IAM), Identity Governance and Administration (IGA) and cloud security solutions across Azure and AWS environments. Develop, implement, and enhance IAM services, governance workflows, role-based access controls (RBAC), and user lifecycle management processes to strengthen security and operational efficiency. Design, test, and implement Zero Trust security strategies focused on identity, devices, applications, and network access. Engineer and maintain PAM solutions for Windows and Linux environments, ensuring secure privileged access across the enterprise. Lead Active Directory security hardening initiatives and identity security improvements. Drive the transition from on-premises Active Directory to Microsoft Entra ID and cloud-native identity services. Develop automation solutions to improve operational efficiency, administrative maintenance, and security detection and response capabilities. Troubleshoot and resolve complex security and IAM-related issues through root cause analysis and implementation of long-term corrective actions. Continuously assess, improve, and modernize security and identity platforms to address evolving threats, business requirements, and industry best practices. Promote IAM, PAM, and security best practices across the organization through training, consultation, and collaboration. Stay current on emerging cybersecurity threats, identity-related risks, and industry trends, evaluating new technologies and processes that enhance enterprise security capabilities and assume other responsibilities as assigned. Job Complexity Manage multiple, concurrent project and task assignments, placing proper priorities on tasks and attention to detail to follow through all assignments to completion Create and manage the lifecycle of documentation to support the architecture and operations of security systems Continuously improving operational playbooks and knowledge transfer material to enable operational support teams to handle increasingly complex tasks to enable Engineering time is focused on the most valuable work Serve as an incident escalation point Provide thought leadership and communications expertise in the development of policies, standards, procedures, and other communication for the department Provide thought leadership on key performance indicators for measuring success objectively Integrate existing and new tools and supporting resources into our security intelligence platform, with the goal of deriving actionable data Evaluate new technologies and processes that enhance security capabilities What you bring to the table… (Must Have) Bachelor’s degree in computer science or information technology discipline 6+ years of relevant work experience, including: 2 years of experience as an Information Security Analyst with experience within at least two of the following disciplines: firewall management, system hardening, identity and access management, identity governance, or privileged access management Deep understanding of Linux identity engineering and administration - must have Linux on resume 1 year of experience working with privileged access management platforms across Windows, Linux, network device, and containerized platforms 2 years of experience supporting IAM solutions (e.g., Saviynt, Sailpoint, etc.) and integrations with upstream and downstream applications. Significant experience working with automation scripting leveraging at least 2 of the following: python, PowerShell, API based integrations, and no/low-code workflow automation platforms. Strong knowledge of L4-L7 protocols such as SSL, HTTP, DNS, SMTP, and IPsec Deep understanding of TCP/IP, computer networking, routing, and switching, and encryption technologies and standards Knowledge of identity and access management and identity governance and administration principles (SSO, MFA, ModernAuth, SoD, Least Privilege, Access Certifications) If would be great if you have… (Nice to Have) CISSP and Identity Management Institute certification is a plus. Cloud Security experience is a plus Conceptual understanding of the Cyber Kill Chain and MITRE ATT&CK framework JSON development Experience with leveraging LLM’s or statistical analysis to drive operational insights Experience with Manufacturing environments is a plus. Strong security policy knowledge and experience. Strong ability to clearly communicate and document complex concepts Experience with data protection tools and processes – Data Loss Prevention (DLP), Rights Management Services (RMS), Cloud Access Security Broker (CASB) Compensation and Benefits: The target base salary range for this full-time, salaried position is between $133,800-$184,000 Individual base pay depends on work location and additional factors such as experience, job-related skills, and relevant education or training. Total pay may include other forms of compensation. In addition, we offer competitive health, dental, 401k and wellness benefits beginning on the first day of employment. Please ask your Talent Acquisition Partner for more information about our total rewards package. The Company is committed to providing equal opportunity for employees and qualified applicants in all aspects of the employment relationship, including consideration for employment, without regard to race, color, sex, sexual orientation, gender identity, national origin, citizenship, marital status, protected veteran status, disability, age, religion, or any other classification protected by law.