JOB SUMMARY:The Lead Security Engineer supports the day-to-day operation of enterprise authentication services and works directly with stakeholders to fulfill routine authentication and access-related requests. The role provides hands-on administration, troubleshooting, maintenance, incident response, and operational support for authentication toolsets, including Microsoft Active Directory, Microsoft Entra ID, and related identity technologies.
This individual follows established security standards, operational procedures, and change-management practices to help maintain the reliability, availability, performance, and security of authentication services. The position requires the ability to understand stakeholder needs, coordinate with technical and business teams, document activities clearly, and communicate technical information effectively. Candidates must have strong written and verbal communication skills and a practical understanding of enterprise authentication technologies and support processes.
ESSENTIAL FUNCTIONS:- Administers and supports Microsoft Active Directory, Microsoft Entra ID, Privileged Access Management, and Certificate Lifecycle Management platforms to provide secure and reliable authentication services across Amtrak.
- Responds to incidents and participates in on-call and after-hours support to maintain the availability, performance, and security of critical Authentication Services.
- Executes system changes in accordance with established security standards, operational procedures, and change-management practices to reduce risk and protect production environments.
- Partners with cybersecurity, infrastructure, application, and business teams to understand requirements, resolve complex technical issues, and support enterprise initiatives dependent on authentication services.
- Develops and maintains technical documentation, operating procedures, support knowledge, and automation to improve service consistency, operational efficiency, and team readiness.
MINIMUM QUALIFICATIONS:- Bachelor's Degree or equivalent combination of education, training and/or relevant experience. Plus 6 years of relevant work experience.
- Professional security-related certifications (e.g. Security+, Certified Information Systems Security Professional (CISSP), SANS certifications, etc.).
PREFERRED QUALIFICATIONS:- Bachelor's Degree or equivalent combination of education, training and/or relevant experience. Plus 8 years of relevant work experience.
- Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
- Experience working with the Microsoft Security Stack.
KNOWLEDGE, SKILLS and ABILITIES:- Knowledge of PCI, HIPAA and NIST.
- Must possess excellent customer service, strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated.
- Proficient in securing Windows and *nix operating systems, endpoint applications, networking protocols and devices.
- Capable of scripting in Python, Bash, Perl, PowerShell or other relevant language.
- Experience with industry standard information security technologies.
- Experience performing technical risk and vulnerability assessments.
- Strong analytical skills with experience working in or supporting a Security Operations Center.
The salary/hourly range is $103,700.00 - $134,460.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee's assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee's base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position.
Health and WellbeingFinancial and RetirementWork and Family Life SupportHealth, Dental, and Vision Insurance401K with Employer MatchGenerous Paid Time Off Wellness ProgramsRailroad Retirement BenefitsPaid Caregiving Days and Backup CareHealth Savings AccountPublic Service Student Loan ForgivenessFertility and Family Building BenefitsNo-cost Personal Health AdvocateStudent Loan AssistanceAdoption and Surrogacy AssistanceMedical Plan Opt-out CreditTuition and Education ReimbursementPaid Family Leave Life InsuranceRail Pass Privileges Short- and Long-term Disability InsuranceEmployee Assistance Program No-cost Financial Advisor SessionsCommuter and Flexible Spending Accounts
Learn more about our benefits offerings here.
Requisition ID:167444
Work Arrangement:02-Remote Optional Click here for more information about work arrangements at Amtrak.
Relocation Offered:No
Travel Requirements:Up to 25%
