Engineer, Security & Identity

In order to be considered for this role, after clicking "Apply Now" above and being redirected, you must fully complete the application process on the follow-up screen.

Reporting to the Director, IT Operations, the Security & Identity Engineer is the senior IT Operations staff member responsible for implementing, maintaining, and continuously improving the organization’s cybersecurity and identity management capabilities across all enterprise systems. This position ensures the protection of organizational assets through secure access controls, proactive threat detection, and adherence to governance, risk, and compliance standards. The Engineer advances the organization’s Zero Trust security model, secures cloud and SaaS environments, enables safe adoption of AI and automation, and serves as the senior escalation point and design authority for all cybersecurity and identity matters. This position works cross-functionally with IT Operations, Business Strategy & Analytics, Baseball R&D and Risk Management to provide cybersecurity guidance. The Security & Identity Engineer shares Event and On-Call coverage responsibilities on a rotation with the IT team.

The Nationals are a military-friendly organization actively recruiting veterans and spouses.

Essential Duties and Responsibilities:

Security Architecture & Engineering (Core Function)

• Participate in the design, implementation, and operation of enterprise security architecture.
• Implement and maintain Zero Trust principles, including identity-first controls and network segmentation.
• Secure cloud, SaaS, and hybrid environments through appropriate configuration and controls; evaluate and implement new security technologies.

Identity & Access Management

• Administer and manage identity platforms (e.g., Azure AD/Entra ID, Okta, SSO, MFA, conditional access).
• Design and enforce role-based and least-privilege access models.
• Manage and/or audit identity lifecycle processes including provisioning, deprovisioning, and access reviews.
• Implement and maintain privileged access management (PAM) controls.

Security Operations & Incident Response

• Monitor, investigate, and respond to security events and alerts across systems and platforms.
• Coordinate and participate in incident response activities, including root cause analysis and remediation.
• Support implementation and tuning of security monitoring tools (SIEM, endpoint protection, etc.).
• Develop and maintain incident response procedures and playbooks.

Vulnerability & Risk Management

• Conduct recurring vulnerability assessments and security reviews, identifying risks and driving remediation.
• Partner with relevant teams to remediate identified vulnerabilities.
• Track and report on risk posture, remediation progress, and security metrics.

Governance, Compliance & Policy

• Enforce enterprise security policies, standards, and procedures; support audits, compliance initiatives, and regulatory requirements.
• Assist in the development and maintenance of security documentation, baselines, and guidelines.

AI, SaaS & Data Security

• Implement controls to support secure AI adoption, including data protection and access governance; ensure secure configuration and usage of SaaS platforms.
• Collaborate with Business Strategy & Analytics, Baseball R&D and IT Operations to ensure security is embedded in new solutions.

Projects, Change & Budget

• Develop and execute cybersecurity projects to completion, discuss challenges and key decision points with IT Leadership.
• Participate in and drive the organization’s change management process for all cybersecurity changes.
• Participate in the planning, adherence, and analysis of the cybersecurity portion of the operational budget; recommend security investments.
• Manage cybersecurity vendors; coordinate maintenance windows and resolve cybersecurity issues.

Collaboration, Guidance & Reporting

• Generate and publish metrics, reports, and dashboards for IT Leadership.
• Provide guidance, training, and escalation support to the IT Operations team.
• Collaborate with internal departments, vendors, and external partners.

Event & On-Call Support

• Provide on-site Event and remote On-Call support on a shared rotation.

Governance, Documentation & Standards

• Develop and maintain documentation including SOPs, installation methodologies, project plans, and environment configurations.
• Adhere to all company and departmental policies, procedures, and operating standards.
• Other duties as assigned.

Compensation:

The projected annual salary range for this position is $100,000 - $120,000 per year. Actual pay is based on several factors, including but not limited to the applicant’s qualifications, skills, expertise, education/training, certifications, and other organization requirements. Starting salaries for new employees are frequently not at the top of the applicable salary range.

Benefits:

The Nationals offer a competitive and comprehensive benefits package that presently includes:

• Paid vacation and sick leave, paid holidays throughout the year and a holiday break in December
• Medical, dental, vision, life and AD&D insurance
• Short- and long-term disability insurance
• Flexible spending accounts
• 401(k) and pension plan
• Access to complimentary tickets to Nationals home games
• Employee discounts
• Free onsite fitness center

Equal Opportunity Employer:

The Nationals are dedicated to offering equal employment and advancement opportunities to all individuals regardless of their race, color, religion, national origin, sex, age, marital status, personal appearance, sexual orientation, gender identity or expression, family responsibilities, matriculation, political affiliation, genetic information, disability, or any other protected characteristic under applicable law.

ExperienceRequired* • Regularly required to stand for long periods, walk long distances, and climb up/down stairs; required to stoop, kneel, crouch, or sit; must lift and/or move up to 45 pounds. Specific vision abilities include close vision and the ability to adjust focus.

• • All members of the IT Department are considered “Critical Personnel” and have responsibilities during weather and other emergencies.
• • On-Call and onsite Event support is shared on a rotation across the IT team.
• • Event: requires the employee to function in a high-activity, heavily crowded outdoor professional sports venue. May work at heights. Employee will be exposed to inclement weather of varying degrees.
• • Office: working conditions are normal for an office environment. Position requires occasional weekend and/or evening work.
• • Must have U.S. work authorization.
• • Must successfully clear a background check.
• • Uphold Core Values: Innovation, Integrity, and Teamwork. These core values set the tone in everything we do, help us succeed on and off the field, make a difference in the community and provide the best guest experience in sports. It is important that the person in this position commits to these core values so that we constantly move forward in the same direction – Together.
• • Proficiency in using computer systems, software applications, and standard business tools.
• • Ability to read, interpret, and apply technical documentation, procedures, and communications.
• • Strong attention to detail with a commitment to accuracy, quality, and thorough documentation of work, processes, and solutions.
• • Excellent verbal, written, presentation, and interpersonal communication skills.
• • Demonstrated teamwork, with the ability to collaborate effectively within multidisciplinary, high-performance teams.
• • Ability to follow direction, execute tasks accurately, and respond constructively to feedback.
• • Sound judgment and integrity in decision-making and actions, with the ability to anticipate needs and act proactively.
• • Exceptional organizational skills, including time management and prioritization, with the ability to manage multiple tasks, competing priorities, and deadlines.
• • Self-motivated with a strong work ethic; takes initiative and demonstrates accountability in delivering high-quality work in a fast-paced environment.
• • Strong analytical and problem-solving skills, with a proactive approach to assessing issues, identifying root causes, and developing and implementing effective solutions independently.
• • Demonstrated innovation with the ability to quickly learn and adapt to new technologies, providing effective technical support and guidance to end users.
• • Ability to serve as senior escalation and design authority and to mentor junior technical staff.
• • Deep expertise in identity and access management, Zero Trust, security operations, and vulnerability management.
• • Strong understanding of IT governance and risk frameworks; ability to balance innovation with risk mitigation.
• • Demonstrated working proficiency with AI/GenAI tools and automation, or demonstrated ability and willingness to reach proficiency within the first 90 days.
• • Experience performing vulnerability assessments and remediation activities.
• • Hands-on experience with identity and security platforms (Azure AD/Entra ID, Okta, MFA, SSO, CrowdStrike, MDR/XDR).
• 5 year(s): • Minimum of 5 years of experience in cybersecurity, identity management, or related roles.

Preferred* • Experience in a multi-site or event-driven organization; experience supporting modern workplace and collaboration technologies.

• • Experience with SIEM, endpoint security tools, and cloud security platforms.
• • Familiarity with regulatory and security frameworks (NIST, ISO, CIS).
• • Relevant industry-recognized certifications such as CISSP, CISM, Security+, Azure Security Engineer, or equivalent.

EducationRequired* Bachelors or better in Information Technology or related field

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.