Lead Security Engineer - Managed Services

CDW is a Fortune 500 technology solutions provider that helps businesses, government, education, and healthcare organizations achieve what’s possible through technology. The Lead Security Engineer will provide technical leadership across security engineering, identity and access management, compliance, platform security, and infrastructure protection for Managed Services platforms and internal infrastructure. The role partners with cross-functional teams to establish secure-by-design practices, improve security posture, reduce risk, and enable scalable growth.

Responsibilities:

• Lead the design, implementation, and continuous improvement of security controls across Managed Services platforms, infrastructure, cloud environments, and identity systems
• Serve as the senior technical authority for security architecture, threat mitigation, risk management, vulnerability remediation, and complex security incidents
• Drive enterprise Identity & Access Management capabilities, including authentication, authorization, privileged access management, access governance, and least-privilege frameworks
• Establish and maintain security standards, secure engineering practices, and compliance controls aligned to frameworks such as PCI DSS, SOC 2, HIPAA, ISO 27001, NIST, and CIS
• Partner with Architecture, Engineering, Infrastructure, and Product teams to embed security throughout the technology lifecycle and support DevSecOps and secure-by-design initiatives
• Provide technical leadership, mentorship, and strategic guidance while evaluating emerging technologies, threats, and opportunities to strengthen CDW's security posture

Requirements:

• 8+ years of experience in cybersecurity, security engineering, infrastructure security, or a related field, including experience leading technical initiatives and mentoring engineers
• Deep expertise securing enterprise-scale hybrid and cloud environments, with hands-on experience in security operations, vulnerability management, incident response, and identity and access management
• Strong understanding of modern security technologies and practices, including IAM, privileged access management, endpoint protection, network security, cloud security, Zero Trust architectures, threat detection, and security automation
• Experience implementing secure engineering practices, including DevSecOps, Secure SDLC, and infrastructure or security automation using scripting languages such as Python or PowerShell
• Working knowledge of regulatory and industry security frameworks, including PCI DSS, ISO 27001, HIPAA, SOC 2, NIST, and CIS Controls
• Proven ability to translate security requirements into scalable technical solutions while effectively partnering with engineering, infrastructure, architecture, and business stakeholders
• CISSP certification, is a plus
• CCNP Security, CCSP, GIAC, Azure Security, or equivalent certifications, is a plus
• Experience with platform engineering and infrastructure automation initiatives, is a plus
• Experience supporting AI, cloud transformation, or modernization programs, is a plus
• Familiarity with enterprise architecture practices and governance frameworks, is a plus
• Experience designing secure access models for large-scale managed services environments is a plus