Senior IT Information Security Engineer

Job description

**Careers With Purpose**
**Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States.

We're proud to offer many development and advancement opportunities to our nearly 50,000 members of the Sanford Family who are dedicated to the work of health and healing across our broad footprint.**
**Facility:** Sanford Bemidji Peak Ctr
**Location:** Bemidji, MN
**Address:** 2017 Net Way NW, Bemidji, MN 56601, USA
**Shift:** 8 Hours - Day Shifts
**Job Schedule:** Full time
**Weekly Hours:** 40.00
**Salary Range:** $40.00 - $66.00
**Department Details**
The Senior Information Security Engineer will play a key role in managing the organization’s core directory services infrastructure across hybrid environments.

This position focuses on designing, deploying, and securing Active Directory (AD), Entra ID, SSO/MFA platforms, authentication protocols, and related technologies to support scalable identity and access frameworks.
Key Responsibilities:
Design, deploy, and manage Microsoft Active Directory (AD) and Entra ID environments.
Maintain domain controllers, forest and domain topologies, and replication health.
Develop and manage logical OU structures and delegated administrative models.
Configure and monitor secure authentication methods (SSO, MFA, Kerberos, SAML, OAuth, etc.).
Implement and manage Group Policy Objects (GPOs) for security compliance.
Manage schema extensions and ensure vendor compliance.
Oversee hybrid identity integration and domain trust relationships.
Maintain enterprise PKI infrastructure and lifecycle of digital certificates.
Troubleshoot and resolve issues related to identity infrastructure services.
Collaborate with IAM and InfoSec teams on security best practices and incident response.
**Job Summary**
Responsible for the technical and operational delivery of enterprise cybersecurity solutions.

Focuses on the development and implementation of processes and tools for identifying, evaluating, implementing, troubleshooting, and maintaining technical security controls for the organization.

These controls are designed to prevent, detect, and contain security threats; enabling Sanford to be productive while maintaining a secure environment that optimizes Sanford’s return on investment.

Lead the building, configuring, and maintaining of cybersecurity systems to ensure our operational environments stay compliant and secure.

Implements security controls using industry best practices across numerous technologies including, but not limited to SIEM, email filtering, web and content filtering, firewall, IPS/IDS systems, identity and access management, SSO/MFA, vulnerability management, and data protection.

Skillfully maintains the existing security systems, including implementing new features, performing upgrades, and managing technical configurations/policies across a variety of business-critical systems.

Proficiently monitors and responds to security system health alerts.

Respond to day-to-day operational work such as managing security tools while simultaneously multitasking with strategic project initiatives.
Provide security consulting services to other Sanford health groups.

Provide assistance to a 24x7 team of dedicated security engineers focused on maintaining operational stability while reducing risk.

Build and maintain key vendor and supplier relationships.

Lead strategic project initiatives ensuring the processes and procedures are well defined and documented.

Recognize both internal and external threats and understand/communicate risks to Sanford Assets.

Make strategic recommendations to enhance and improve overall security posture.

Advise on methods to increase efficiency of current toolsets (such as script automation or process improvement recommendations).

Mentor others within the team as well as receive instruction and guidance from others within the team.

Write documentation that can be used by all team members and other employees.

Identify gaps in established/documented process and update as needed.
Works under limited guidance due to previous experience/breadth of knowledge of processes and organizational knowledge.

Acts independently to determine methods and procedures on new assignments.

Regularly presented with new assignments and projects that require the application of independent judgement/interpretation of policies/practices.

Checks own work and the work of other team members.
**Qualifications**
Bachelor’s degree in cyber security or an information technology related field.
Minimum of 4 years experience working in Cyber Security field.
Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired
**Benefits**
Sanford Health offers an attractive benefits package for qualifying full-time and part-time employees.

Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home-work balance.

For more information about Total Rewards, visit https://sanfordcareers.com/benefits .
Sanford is an EEO/AA Employer M/F/Disability/Vet.

If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-673-0854 or send an email to talent@sanfordhealth.org .
Sanford Health has a Drug Free Workplace Policy.

An accepted offer will require a drug screen and pre-employment background screening as a condition of employment.
**Req Number:** R-0238790
**Job Function:** Information Technology
**Featured:** No

Required Skill Profession

Other General