Senior Cybersecurity Engineer – IAM & Endpoint Security

Key Responsibilities

• Lead the implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.
• Own identity lifecycle management, endpoint security, and access governance, ensuring secure configurations and consistent enforcement of standards.
• Drive automation and operational efficiency across provisioning, compliance, and access management processes.
• Apply Zero Trust principles and threat modeling to strengthen identity and endpoint security design.
• Partner with Cyber Operations to enhance detection, response, and control monitoring capabilities.
• Conduct risk assessments and control validation, focusing on identity compromise and endpoint threats.
• Collaborate with global teams and mentor engineers to promote consistent, scalable security practices.

Qualifications and Experience

• 8+ years of experience in cybersecurity engineering.
• Strong hands-on expertise in IAM, endpoint security, and privileged access management.
• Experience in hybrid environments (on-premises and cloud).
• Ability to translate architectural principles into practical engineering solutions.
• Bachelor's degree required.
• Preferred Certifications: CISSP, CISM, or equivalent.

Technical Expertise

• Identity and Access Management (authentication, authorization, federation, governance)
• Privileged Access Management and least privilege enforcement
• Endpoint security, hardening, and threat detection/response
• Device management and endpoint compliance
• Zero Trust architecture and identity-centric security models
• Threat modeling and risk-based security practices
• Automation/scripting for security operations
• Familiarity with NIST, ISO, and CIS frameworks

Core Competencies

• Technical leadership and hands-on problem solving
• Risk-based decision making
• Collaboration across global teams
• Clear and effective communication

Values & Culture

• Acts with non-negotiable integrity and maintains the highest professional standards.
• Demonstrates intellectual curiosity, seeking to continually advance the firm’s cybersecurity engineering posture.
• Embodies collaboration, transparency, and accountability in all engagements.
• Dedicated to protecting client trust through security excellence and proactive risk management.

Special Requirements

• Occasional after-hours support for global operations

This role is not eligible for employment-based immigration sponsorship. Applicants must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Equal Employment Opportunity

Russell Investments is committed to providing equal employment opportunities for all associates and employment applicants regardless of race, religion, ancestry, creed, color, gender (including gender identity which refers to a person's actual or perceived sex, and includes self-image, appearance, behavior or expression, whether or not different from that traditionally associated with a person's biological sex), age, national origin, citizenship status, disability, medical condition, military status, veteran status, marital status, sexual orientation, past or present unemployment status , or any other characteristic protected by law.