Cyber Security SR Engineer II

Yum! Brands is seeking a Cyber Security Senior Engineer II to support and enhance its Microsoft Entra ID and hybrid Active Directory environments. The role focuses on identity and access management, security operations, governance and compliance, automation, troubleshooting, and collaboration across enterprise technology teams.

Responsibilities:

• Administer and support Microsoft Entra ID and hybrid Active Directory environments
• Support identity lifecycle management processes including onboarding, transfers, and offboarding
• Configure and maintain role-based access controls (RBAC)
• Administer and support:
• Run existing process and collections
• Develop new process
• Automate processes
• Assessment reviews and mitigation
• Security Hardening
• Group Policy
• Access Reviews
• Identity Protection
• Passwordless Authentication
• Multifactor Authentication (MFA)
• Conditional Access Policies
• Troubleshoot complex authentication, access, and identity-related issues
• Implement and maintain identity security controls to protect enterprise user and privileged accounts
• Investigate identity-related security findings and assist with remediation activities
• Participate in security assessments, penetration testing remediation efforts, and vulnerability reduction initiatives
• Contribute to the evaluation and testing of emerging IAM technologies and capabilities
• Support secure integration of applications with enterprise identity platforms
• Support compliance assessments and control validation activities
• Participate in access certification and entitlement review processes
• Assist with evidence collection and audit activities related to:
• Vender assessment process
• Internal assessment processes
• Cybersecurity Framework (CSF)
• CIS Controls
• PCI-DSS
• NIST
• Ensure identity management processes align with corporate security policies and standards
• Develop and maintain automation solutions using PowerShell and Microsoft Graph
• Identify opportunities to improve operational efficiency and enhance security through automation
• Assist in developing operational monitoring, reporting, and alerting capabilities
• Contribute to process documentation and standardization efforts
• Partner with Infrastructure, Cyber Security, Cloud Engineering, HR, and Application teams to support IAM initiatives
• Provide technical input during security reviews and project engagements
• Share knowledge and best practices with team members
• Build effective relationships across teams to support successful delivery of IAM services
• Clearly communicate technical issues, risks, and recommendations to stakeholders

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
• Equivalent professional experience may be considered in lieu of degree requirements
• 4-7 years of cybersecurity, systems engineering, IAM, or related experience
• 10 years of Microsoft Entra ID / Azure Active Directory Engineering and Administration experience
• Experience supporting hybrid identity environments
• Experience working within enterprise Microsoft 365 environments
• Experience with security controls, access governance, or audit activities
• Experience scripting or automating administrative tasks using PowerShell
• Experience Active Directory Group Policy administration and design
• Experience Active Directory tiering design and administration
• Experience with Active Directory hardening
• Microsoft Entra ID HPA administration
• Active Directory HPA administration
• Active Directory Group Policy
• Active Directory permission assignments
• Active Directory Tiering
• Active Directory PowerShell scripting and automation
• Azure/Microsoft Cloud Security
• Microsoft Graph
• Conditional Access
• MFA and Passwordless Authentication
• PIM
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Security+, CISSP, CCNA or equivalent security certification