Staff Cybersecurity Engineer Job at Corient in Chicago

Overview Join to apply for the Staff Cybersecurity Engineer role at Corient . Corient does not offer employment sponsorship. All candidates must be legally authorized to work in the United States without current or future visa sponsorship. Responsibilities Design, engineer, and document scalable security controls across identity, cloud, application, and network domains. Translate security policies and standards into technical design patterns and reusable control modules. Collaborate with infrastructure, cloud, and application teams to embed security requirements early in design and implementation lifecycles. Develop infrastructure-as-code (IaC) templates, secure configuration baselines, and automation pipelines that enforce consistent security across environments. Engineer secure configurations and access models for cloud services, including Azure, Microsoft 365, and SaaS platforms. Implement and integrate authentication and authorization mechanisms using MFA, SAML, and OAuth. Strengthen identity lifecycle integrations and enforce least‑privilege and conditional‑access principles. Support the design of data‑protection, encryption, and compliance controls within cloud environments. Engineer secure connectivity and segmentation models across hybrid and cloud environments. Design network‑security architectures, including next‑generation firewall policies, zero‑trust access patterns, and secure egress filtering. Collaborate with Network Engineering to implement scalable designs for ZTNA, SD‑WAN, or SASE solutions supporting secure remote access. Integrate network and endpoint controls into automated provisioning and configuration management frameworks. Develop scripts and automation to codify and deploy security configurations, compliance checks, and control testing. Integrate security tooling and telemetry into build and deployment processes for continuous assurance. Streamline security tasks and verification steps through PowerShell, Python, or other automation frameworks. Contribute to security architecture reviews, technical documentation, and knowledge sharing across teams. Provide technical mentorship and guidance on security best practices to engineering and IT staff. Partner with business and technology leaders to align security engineering priorities with organizational goals. Qualifications A four‑year college degree and equivalent industry training or certifications (e.g., CEH, CISM, CISSP, GSEC). Ten+ years of experience in cybersecurity engineering, architecture, or related position; preferably within the financial services industry. Strong understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems. Familiarity with industry frameworks, such as NIST, CIS‑18 and ISO. Demonstrated experience designing or integrating security controls such as IAM, EDR, DLP, IGA, SOAR, SIEM, CASB, SWG, ZTNA and/or NGFW platforms. Strong analytical and critical thinking skills and the ability to organize work in a logical, thorough, and succinct manner. Strong scripting and automation skills (Python, PowerShell, etc.) and infrastructure as code ecosystems (e.g., Terraform, CloudFormation). Highly self‑motivated, results‑oriented, and self‑directed to handle multiple ongoing tasks. Flexibility to adapt to changing assignments and ability to effectively prioritize. Effective written and verbal English communication at all levels. Demonstrated ability to operate and innovate in a small team with a fast‑paced environment, balancing both strategic and tactical needs. Physical Requirements Work in an office environment; prolonged periods of sitting at a desk and working on a computer. Lifting up to 15 pounds. On‑site 4 days per week. U.S. Eligibility Requirements Must be 18 years of age or older. Must be willing to submit to a background investigation; any offer of employment is conditioned upon the successful completion of a background investigation. Must have unrestricted work authorization to work in the United States. Corient hires U.S. citizens or permanent residents. Corient participates in E‑Verify and will provide the federal government with your Form I‑9 information to confirm that you are authorized to work in the U.S. Must be willing to execute Corient’s Employee Agreement or Confidentiality and Non‑Disclosure Agreement, which require, among other things, post‑employment obligations relating to non‑solicitation, confidentiality, and non‑disclosure. What You can Expect from Us 401(k) Plan with Employer Matching Four Medical Plan options that are generously subsidized by Corient Employer paid Dental, Vision & Life and AD&D Insurance Employer paid Short‑term & Long‑term Disability Paid Maternity & Parental Leave Flexible Spending Accounts & Health Savings Accounts Dependent Care FSA Commuter & Transit FSA Corporate Discount Program – Perkspot Training Reimbursement Paid Professional Designations Giving back to the community – Volunteer days Pay Information This position is exempt and is paid according to the laws of the State of Illinois. The pay range for this position is $115,000 – $175,000 USD per year. Seniority level Mid‑Senior level Employment type Other Job function Information Technology Equal Opportunity Employer Statement Corient is an equal opportunity employer. All candidates will be recruited and, if applicable, selected and employed without regard to sex, race, religion, marital status, veteran status, age, national origin, sexual orientation, gender identity, color, creed, ancestry, disability, genetic information or any other basis prohibited by law. #J-18808-Ljbffr