Security Control Engineer

Job Title: Security Control Engineer
Location: Dallas/North Carolina/NY (Hybrid)
Employment Type: Contract (12+ Months)
Experience: 13–18 Years

Role Overview
We are seeking a Security Control Engineer to support the WF Prisma project. The role requires strong expertise in Identity & Access Management (IAM), Privileged Access Management (PAM), vulnerability management, and DevSecOps practices. The engineer will be responsible for evaluating enterprise security controls, enforcing policies, and ensuring compliance with governance frameworks.

Key Responsibilities
Assess and implement IAM frameworks to evaluate access controls, security policies, and compliance governance.

Work with CyberArk, PAM, and SailPoint to enforce enterprise security concepts and governance.

Conduct vulnerability management activities, including scanning, remediation, and reporting.

Collaborate with DevOps teams to integrate DevSecOps practices into CI/CD pipelines.

Evaluate and strengthen enterprise security policies, controls, and compliance frameworks.

Provide recommendations for improving platform security posture.

Monitor and respond to security incidents, ensuring timely resolution.

Document findings, prepare reports, and support audits.

Required Skills
IAM Expertise – Access controls, security policies, compliance frameworks.

CyberArk / PAM / SailPoint – Privileged access management and governance.

Vulnerability Management – Tools and processes for identifying and mitigating risks.

DevSecOps – Integration of security into development and deployment pipelines.

Security Governance – Policy enforcement, compliance, and enterprise controls.

Strong analytical and problem-solving skills.

Excellent communication and collaboration abilities.

Role Impact
This role ensures that the WF Prisma project maintains robust security controls, aligns with compliance frameworks, and integrates security seamlessly into development and operations. The Security Control Engineer will be a key contributor to enterprise risk management and governance.