Job description

Your success is a train ride away! As we move America’s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees. Are you ready to join our team? Our values of ‘Do the Right Thing, Excel Together and Put Customers First’ are at the heart of what matters most to us, and our Core Capabilities, ‘Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety & Security’ are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future. JOB SUMMARY: The Lead Security Engineer supports the day-to-day operation of enterprise authentication services and works directly with stakeholders to fulfill routine authentication and access-related requests. The role provides hands-on administration, troubleshooting, maintenance, incident response, and operational support for authentication toolsets, including Microsoft Active Directory, Microsoft Entra ID, and related identity technologies. This individual follows established security standards, operational procedures, and change-management practices to help maintain the reliability, availability, performance, and security of authentication services. The position requires the ability to understand stakeholder needs, coordinate with technical and business teams, document activities clearly, and communicate technical information effectively. Candidates must have strong written and verbal communication skills and a practical understanding of enterprise authentication technologies and support processes. ESSENTIAL FUNCTIONS: • Administers and supports Microsoft Active Directory, Microsoft Entra ID, Privileged Access Management, and Certificate Lifecycle Management platforms to provide secure and reliable authentication services across Amtrak. • Responds to incidents and participates in on-call and after-hours support to maintain the availability, performance, and security of critical Authentication Services. • Executes system changes in accordance with established security standards, operational procedures, and change-management practices to reduce risk and protect production environments. • Partners with cybersecurity, infrastructure, application, and business teams to understand requirements, resolve complex technical issues, and support enterprise initiatives dependent on authentication services. • Develops and maintains technical documentation, operating procedures, support knowledge, and automation to improve service consistency, operational efficiency, and team readiness. MINIMUM QUALIFICATIONS: • Bachelor’s Degree or equivalent combination of education, training and/or relevant experience. Plus 6 years of relevant work experience. • Professional security-related certifications (e.g. Security+, Certified Information Systems Security Professional (CISSP), SANS certifications, etc.). PREFERRED QUALIFICATIONS: • Bachelor’s Degree or equivalent combination of education, training and/or relevant experience. Plus 8 years of relevant work experience. • Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure. • Experience working with the Microsoft Security Stack. KNOWLEDGE, SKILLS and ABILITIES: • Knowledge of PCI, HIPAA and NIST . • Must possess excellent customer service, strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated. • Proficient in securing Windows and *nix operating systems, endpoint applications, networking protocols and devices. • Capable of scripting in Python, Bash, Perl, PowerShell or other relevant language. • Experience with industry standard information security technologies. • Experience performing technical risk and vulnerability assessments. • Strong analytical skills with experience working in or supporting a Security Operations Center. The salary/hourly range is $103,700.00 – $134,460.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee’s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee’s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. Health and Wellbeing Financial and Retirement Work and Family Life Support Health, Dental, and Vision Insurance 401K with Employer Match Generous Paid Time Off Wellness Programs Railroad Retirement Benefits Paid Caregiving Days and Backup Care Health Savings Account Public Service Student Loan Forgiveness Fertility and Family Building Benefits No-cost Personal Health Advocate Student Loan Assistance Adoption and Surrogacy Assistance Medical Plan Opt-out Credit Tuition and Education Reimbursement Paid Family Leave Life Insurance Rail Pass Privileges Short- and Long-term Disability Insurance Employee Assistance Program No-cost Financial Advisor Sessions Commuter and Flexible Spending Accounts Learn more about our benefits offerings here. Requisition ID: 167444 Work Arrangement: 02-Remote Optional Click here for more information about work arrangements at Amtrak. Relocation Offered: No Travel Requirements: Up to 25% You power our progress through your performance. We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions. Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen. Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law. In accordance with DOT regulations (49 CFR § 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions. In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. §1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses. Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience. Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.

Requirements

Must-haves

Your success is a train ride away!
Are you ready to join our team?
Administers and supports Microsoft Active Directory, Microsoft Entra ID, Privileged Access Management, and Certificate Lifecycle Management platforms to provide secure and reliable authentication services across Amtrak.
Responds to incidents and participates in on-call and after-hours support to maintain the availability, performance, and security of critical Authentication Services.
Executes system changes in accordance with established security standards, operational procedures, and change-management practices to reduce risk and protect production environments.
Partners with cybersecurity, infrastructure, application, and business teams to understand requirements, resolve complex technical issues, and support enterprise initiatives dependent on authentication services.
Develops and maintains technical documentation, operating procedures, support knowledge, and automation to improve service consistency, operational efficiency, and team readiness.
Bachelor’s Degree or equivalent combination of education, training and/or relevant experience. Plus 6 years of relevant work experience.
Professional security-related certifications (e.g. Security+, Certified Information Systems Security Professional (CISSP), SANS certifications, etc.).
Bachelor’s Degree or equivalent combination of education, training and/or relevant experience. Plus 8 years of relevant work experience.
Knowledge of PCI, HIPAA and NIST .
Must possess excellent customer service, strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated.
Proficient in securing Windows and *nix operating systems, endpoint applications, networking protocols and devices.
Capable of scripting in Python, Bash, Perl, PowerShell or other relevant language.
Experience with industry standard information security technologies.
Experience performing technical risk and vulnerability assessments.
Strong analytical skills with experience working in or supporting a Security Operations Center.
Health and Wellbeing
Financial and Retirement
Work and Family Life Support
Wellness Programs
Railroad Retirement Benefits

Nice-to-haves

Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
Experience working with the Microsoft Security Stack.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazurepython

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Wellness