Job Summary and Mission 

Starbucks Global Cyber Security Group is responsible for engineering and designing Identity and Access Management and Security systems to meet business requirement, goals and objectives encompassing wide range technologies that are in accordance with Starbucks Strategy & Architecture standards and guidelines.

The Information Security Engineer will develop tools and processes according to architectural guidelines with an oversight by senior members of the team, identify weaknesses in our tooling that will drive changes to the overall architecture, and work as a liaison to architects, business and IT teams to ensure that identity management and security principals are applied to the technology platforms and information within the organization in accordance with established standards and policies.

Models and acts in accordance with Starbucks guiding principles.

Summary of Key Responsibilities  

• Participate in technical design, development, support, and system administration for large enterprise with knowledge of one or more of the following:
  • Identity Lifecycle Management
  • Identity Federation
  • MultiFactor Authentication
  • Cloud Identity Services
  • Active Directory Domain Services
  • Virtual Directory Services
• Exhibits understanding of IAM industry standards and specifications (e.g. oAuth, Open ID Connect, SAML, and/or SCIM)
• Analyzes and improve a process with a bias toward automation
• Develops tools and framework to improve operational efficiency and anomaly detection
• Collaborates and communicates effectively with other team members at multiple levels of the organization
• Participates on cross-functional project teams and ensuring that new system objects are supported by developing administrative procedures
• Provides third-level production support for Identity Management environment, including after-hours on-call support.

Required Knowledge

• 1-3 years of professional experience with demonstrated progressive responsibility in IAM  development, integration, deployment and related backend configuration technologies
• Experience integrating IAM applications with common identity stores (LDAP, relational databases, application servers, virtual directory servers, physical access management systems)
• Experience in servers/AD/ADLDS replication, Security and Account Management
• Knowledge and understanding of solutions leveraging OAuth, OpenID Connect, SAML, WS-* and Multifactor Authentication (MFA)
• Familiar with architecture design tools and creation/design of service oriented architectures

Preferred Qualifications

• Knowledge of software development principles and design patterns
• Working knowledge of software development and programming languages - C#, C, Java, REST, HTML, XML, JSON, Python, Docker, shell scripting
• Knowledge of architectures including (but not limited to): MS Active Directory, DNS, DHCP, WINS, IP, LDAPS, NAP, PKI, Enterprise Group Policy Management, Security protocols (IPSEC/TLS/EAP).
• Experience in analyzing, planning, testing, and implementation and maintenance of Active Directory architectures in a Global Enterprise environment
• Experience with SQL database administration or management
• Experience participating in projects of increasing size and complexity including the utilization of project planning and project dashboard tools.
• Excellent customer service, collaboration, and presentation skills.
• Strong written and verbal communication skills
• Excellent problem solving and troubleshooting skills
• Experience with multiple DevOps related tools and technologies (JIRA, Confluence, Bitbucket, Jenkins, Ansible, Puppet, Coverity, etc.) a plus
• Software system design experience to include web and cloud-based systems
• Familiarity with UNIX (Solaris and Redhat Linux) a plus.
• Industry certification like CISSP, CEH, CCSP and/or CISA a plus.

Summary of Experience  

• Experience with building and maintain large enterprise Identity Management deployments - 1 years
• Experience implementing and managing Microsoft Identity Management (FIM/MIM) (highly preferred)
• Experience with Identity Federation and Identity Lifecycle Services - 1 years
• Engineering Knowledge of AD or other LDAP technologies – 1 years
• MS Azure or other cloud and web based systems: 1 years
• “Devops”/Agile experience (highly preferred)
• Experience with leading product evaluations, planning, gathering requirements, testing, recommending and implementing solutions - 1 years

Starbucks and its brands are an equal opportunity employer of all qualified individuals. We are committed to creating a diverse and welcoming workplace that includes partners with diverse backgrounds and experiences. We believe that enables us to better meet our mission and values while serving customers throughout our global communities. People of color, women, LGBTQIA+, veterans and persons with disabilities are encouraged to apply. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal state and local ordinances. Starbucks Corporation is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at 206-318-0660 or via email at applicantaccommodation@starbucks.com

_ _

Starbucks is about more than just a coffee; they're dedicated to employee and community growth. Starbucks even runs a program that pays for their baristas tuition to help them finish their education. That’s why when you launch your career inspired by human connection and the opportunity to become your personal best, the possibilities are endless. SCAP - Starbucks College Achievement Program