<h3>Job Description</h3>
Cox Automotive seeking a highly experienced cybersecurity engineer to lead our End User Data Protection initiatives. This role is responsible for designing, implementing, and managing strategies that protect sensitive data accessed and used by end users across the enterprise. The ideal candidate will have deep expertise in identity and access management (IAM), data loss prevention (DLP), secure authentication, and regulatory compliance. This position plays a critical role in ensuring that data protection measures align with business needs while maintaining a frictionless user experience. Key success factors include: 
<ul>
<li>Proven ability to architect and implement scalable data protection solutions across diverse platforms and user environments.</li>
<li>Deep understanding of IAM technologies, authentication protocols, and secure access controls.</li>
<li>Experience integrating data protection with enterprise identity platforms such as Okta, Azure AD, and Ping Identity.</li>
<li>Strong knowledge of regulatory frameworks (e.g., GDPR, GLBA, HIPAA) and their impact on data protection strategies.</li>
<li>Ability to collaborate across technical and business teams to drive adoption of secure practices.</li>
<li>Experience in implementing adaptive authentication, conditional access, and passwordless technologies. </li>
</ul>
 Key Responsibilities 
<ul>
<li>Lead the development and execution of end-user data protection strategies across enterprise systems.</li>
<li>Design and implement secure authentication and authorization mechanisms using protocols such as OAuth 2.0, OpenID Connect, SAML, and Kerberos.</li>
<li>Participate in the deployment and management of DLP, encryption, and secure collaboration tools.</li>
<li>Collaborate with IAM, DLP, and application teams to integrate data protection into identity workflows.</li>
<li>Define and enforce policies for secure data access, handling, and sharing.</li>
<li>Support audit, compliance, and risk management initiatives related to identity and data security. </li>
<li>Drive adoption of privacy-enhancing technologies and passwordless authentication solutions. </li>
<li>Stay current with emerging threats, technologies, and best practices in data protection and IAM. </li>
</ul>
 Minimum Requirements: 
<ul>
<li>Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field.</li>
<li>Experience implementing and managing enterprise-grade DLP and encryption solutions, together with hands-on experience with IAM platforms and authentication protocols </li>
<li>Ability to clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders. </li>
<li>Excellent customer service skills, writing, and executive presentation skills. </li>
<li>Ability to develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership. </li>
<li>Ability to evaluate risks and make recommendations based on impact and likelihood of the risk to the business. </li>
</ul>
 Required Technical Skills 
<ul>
<li>Deep understanding of IAM concepts: authentication, authorization, SSO, MFA, RBAC, ABAC. </li>
<li>Proficiency in authentication protocols: SAML 2.0, OAuth 2.0, OpenID Connect, Kerberos. </li>
<li>Experience with IAM platforms: Okta, Azure AD, Ping Identity, SailPoint. </li>
<li>Implementation and management of MFA and passwordless solutions (e.g.YubiKey, Windows Hello). </li>
<li>Strong knowledge of DLP, encryption, and secure file sharing technologies. </li>
<li>Familiarity with identity federation and conditional access policies. </li>
<li>Understanding of cybersecurity frameworks: ISO 27000, NIST, FFIEC. </li>
</ul>
 Preferred Technical Skills 
<ul>
<li>Experience with SCIM and user provisioning connectors. </li>
<li>Deep understanding of federated authentication and cross-domain identity management. </li>
<li>Experience deploying identity controls in Entra ID and cloud platforms. </li>
<li>Knowledge of zero trust architecture and cloud security frameworks (e.g., AWS Well-Architected Framework). </li>
</ul>
 Preferred Qualifications 
<ul>
<li>Automotive industry experience. </li>
<li>Big four consulting or Fortune 500 company experience. </li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA). </li>
</ul>
 USD 119,600.00 - 199,400.00 per year Compensation: Compensation includes a base salary of $119,600.00 - $199,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

579 ping identity Jobs