Cyber Security Identity Engineer

FirstEnergy at a Glance We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger. FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts. This position is within FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00] FirstEnergy takes a market-based approach to pay, which may vary depending on your location. In addition, your actual base salary will depend on various factors such as your skills, qualifications, and experience. The estimated pay range for this role is $91,375 - $171,000. The pay range for certain locations, including the state of New Jersey, include a 20% differential to account for an increased cost of living, making the pay range $109,650 - $205,200. Position can sit in OH, WV, PA, MD, NJ. Would need to be within 60 minutes of Corporate FirstEnergy Location. Position Overview We’re looking for a technically skilled Cyber Security Systems Administrator to support, administer, engineer, and improve FirstEnergy’s Identity and Access Management (IAM) technologies. This position will play a key role in maintaining secure and reliable identity, authentication, authorization, and access services for internal and external users. The Cyber Security Systems Administrator will provide hands-on technical support across the IAM technology environment, including capabilities supporting Identity Governance, Access Management, Privileged Access Management, Password Management, and Identity Analytics and Intelligence. This role works closely with Cybersecurity, IT, HR, Transmission, Distribution, Supply Chain, and other business stakeholders to implement and support secure, scalable identity solutions across FirstEnergy’s hybrid technology environment. Key Responsibilities Administer, configure, maintain, troubleshoot, and enhance enterprise Identity and Access Management technologies and supporting infrastructure. Support identity lifecycle processes, including onboarding, transfers, role changes, and offboarding of employees and contractors, in coordination with HR, IT, and business stakeholders. Provide technical administration and operational support across the five IAM pillars: Identity Governance, Access Management, Privileged Access Management, Password Management, and Identity Analytics and Intelligence. Administer and support enterprise authentication technologies, including Multi-Factor Authentication (MFA), Single Sign-On (SSO), Conditional Access, federation services, and passwordless authentication. Configure and maintain identity integrations utilizing authentication and federation standards such as SAML, OAuth, and OpenID Connect. Implement and maintain role-based access control (RBAC), least privilege, and appropriate access controls and permissions across information technology and operational technology environments. Support IAM platforms and associated technologies, which may include Microsoft Entra ID, Azure B2C, Okta, Ping Identity, SailPoint, OneIdentity, and privileged access management solutions. Monitor the health, availability, performance, and reliability of IAM platforms and supporting infrastructure and help ensure established Service Level Agreements (SLAs) are met. Participate in IAM-related incident investigations, troubleshooting complex authentication and access issues, identifying root causes, implementing corrective actions, and recommending improvements to processes and procedures. Provide IAM subject matter expertise during cybersecurity incidents involving authentication, authorization, privileged access, identity compromise, or access governance. Assist with integrating IAM controls and identity-related telemetry with Cyber Operations, threat detection, and insider threat monitoring capabilities. Implement and maintain technologies supporting secure remote access, vendor access management, and privileged access controls, including requirements associated with operational technology and critical infrastructure environments. Maintain appropriate segregation of duties between IAM operations, access governance, and compliance oversight functions. Support cybersecurity and regulatory compliance requirements, including activities associated with SOX and CIP, by maintaining appropriate technical controls, system configurations, documentation, and supporting evidence. Ensure IAM technologies and configurations adhere to applicable cybersecurity, data governance, and data loss prevention policies. Participate in technology upgrades, implementations, integrations, migrations, and other IAM projects, helping ensure technical deliverables are completed successfully. Develop and maintain technical documentation, including system configurations, operational procedures, troubleshooting guides, architecture information, and support documentation. Identify opportunities to improve IAM reliability, security, automation, and operational efficiency through technology and process improvements. Maintain technical expertise in supported platforms through training, webinars, conferences, professional publications, research, and other professional development activities. Collaborate with Cyber Operations, Infrastructure, HR, Compliance, Internal Audit, and business stakeholders to implement identity controls that enable business objectives while reducing cybersecurity risk. Demonstrate FirstEnergy’s Core Values and Behaviors through day-to-day interactions, decision-making, teamwork, and accountability. Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technology field, or equivalent applicable experience. Experience in cybersecurity, Identity and Access Management, infrastructure, systems administration, application support, or related technology roles. Experience supporting or administering Identity and Access Management technologies such as Microsoft Entra ID, Azure B2C, Okta, Ping Identity, SailPoint, OneIdentity, PAM solutions, token management platforms, IT service management platforms, and certificate lifecycle management technologies is preferred. Deep technical knowledge of authentication and federation technologies and protocols, including SAML, OAuth, and OpenID Connect. Strong understanding of MFA, SSO, Conditional Access, federation, passwordless authentication, RBAC, and least-privilege principles. Proficiency in cybersecurity principles, identity lifecycle management, privileged access, authentication, authorization, and access governance. Experience working within regulated environments and supporting compliance activities such as SOX and CIP is preferred. Knowledge of system and application management practices, including strategies, policies, principles, procedures, and standards. Understanding of architectural design principles related to system availability and disaster recovery. Strong analytical, troubleshooting, and problem-solving skills. Strong written and verbal communication skills with the ability to explain technical issues clearly to technical and non-technical audiences. Demonstrated ability to collaborate effectively across technical teams and business functions. Ability to manage multiple technical assignments and priorities in a dynamic operational environment. Ability and willingness to provide off-hours support for major incidents and critical activities when required. Benefits, Compensation & Workforce Diversity At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time. Safety Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards. Position Classification Exempt FirstEnergy Human Resources Team