IT Security Engineer III

Overview

The Security Engineer III is a senior individual contributor responsible for designing, implementing, and continuously improving the organization’s cybersecurity infrastructure and security controls. This role provides technical leadership across security engineering, identity and access management, endpoint and data protection, cloud security, compliance, and threat prevention.

The role owns the end-to-end lifecycle of security controls, from design and implementation through monitoring, validation, and continuous improvement. Working closely with Infrastructure, Applications, Retail Systems, Legal, Risk, HR, and business partners, the Security Engineer III is responsible for developing automation, integrations, and scalable solutions that enhance security effectiveness, improve efficiency, and reduce manual effort.

The role reports to our Store Support Office in Phoenix, AZ, with a hybrid work arrangement requiring in-office presence Tuesday through Thursday.

Overview of Responsibilities

Security Architecture & Engineering

• Design and implement enterprise security solutions across network, endpoint, cloud, identity, email, and data protection domains.
• Assess and enhance the organization's security architecture to address emerging threats and vulnerabilities.
• Configure and maintain secure system settings and hardening standards, including alignment to applicable benchmarks and best practices.
• Research, evaluate, and recommend new security technologies, tools, and proof-of-concept solutions.
• Integrate security controls into infrastructure and application deployments through partnership with cross-functional teams.
• Support cloud security initiatives across Microsoft Azure and related services.

Security Operations & Threat Management

• Monitor security alerts, analyze logs, investigate threats, and coordinate remediation activities.
• Develop and implement response strategies for detected threats, minimizing business impact and reducing risk exposure.
• Serve as an escalation point for security incidents and security-related operational issues.
• Troubleshoot and resolve security technology failures and control gaps.
• Develop automation and integrations that improve monitoring, reporting, detection, and remediation capabilities.

Identity, Endpoint & Data Protection

• Administer and maintain identity security controls, including SSO, SAML, SCIM, conditional access, MFA, and privileged-access management.
• Manage endpoint security technologies, including endpoint protection, privilege management, device compliance, and endpoint hardening.
• Oversee data loss prevention, email security, and information protection controls.
• Secure and enable enterprise AI/LLM adoption, including application discovery, data-egress and DLP controls for AI tools, and sanctioned-application enablement.
• Manage encryption, authentication, credential, key management, and enterprise secrets-management solutions.
• Conduct privileged account, service account, and access governance reviews.

Security Governance, Risk & Compliance

• Support enterprise information security governance, risk, and compliance initiatives.
• Perform security assessments and recommend improvements to strengthen security posture.
• Execute recurring security controls and provide audit evidence for compliance reviews.
• Evaluate risks associated with vendors, suppliers, and third-party partners and recommend mitigation strategies.
• Assist with compliance activities aligned with applicable regulatory and security frameworks.
• Develop and maintain security policies, standards, procedures, and technical documentation.

Security Leadership & Collaboration

• Lead security-focused projects and initiatives.
• Provide technical guidance and mentoring to other security team members.
• Drive security requirements through partner teams' implementation and change-management processes.
• Deliver security awareness and best-practice education to employees and stakeholders.

Participate in a shared 24/7 on-call rotation as required.

#LI-LM1

Qualifications

Knowledge Skills & Abilities

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent combination of education and experience.
• 5+ years of cybersecurity, information security, or related IT engineering experience.
• Demonstrated ownership of enterprise security platforms from design through implementation and operational support.
• Strong knowledge of security architecture, risk management, endpoint security, identity security, cloud security, and network security principles.
• Experience implementing and managing security technologies in enterprise environments.
• Strong understanding of network protocols, encryption standards, authentication technologies, and security best practices.
• Experience with security automation, scripting, API integrations, and operational efficiency initiatives.
• Knowledge of compliance and security frameworks such as NIST CSF, CIS Controls, and SOX-related controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written, verbal, and interpersonal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.

Preferred Technical Experience

• Microsoft Azure (IaaS, PaaS, Entra ID, Exchange Online)
• Active Directory
• Okta or Microsoft Entra ID
• Netskope or comparable SASE/SWG/CASB platforms
• Proofpoint or other secure email gateway solutions
• CrowdStrike Falcon
• BeyondTrust or equivalent Privileged Access Management tools
• Microsoft Purview
• SIEM and security monitoring platforms
• Intune, Endpoint Manager, and Configuration Manager
• Windows Server administration
• Windows 10/11 endpoint management
• ServiceNow (ITSM/SecOps)
• PowerShell, Python, and REST API integrations
• DevSecOps and CI/CD security practices
• Network security technologies including firewalls, NAC, IDS/IPS, and Zero Trust architectures

Preferred Certifications

• CISSP preferred
• GIAC certifications
• Microsoft Security certifications
• CCSP, Security+, or equivalent industry certifications
• ITIL 4 knowledge preferred

Core Competencies

• Communication
• Customer Focus
• Driving for Results
• Positive Approach

Benefits

In addition to a rewarding career, Sprouts offers a comprehensive program to help support you and your family. These programs include:

• Competitive pay
• Sick time plan that you can use to support you or your immediate families health
• Vacation accrual plan
• Opportunities for career growth
• 15% discount for you and one other family member in your household on all purchases made at Sprouts
• Flexible schedules
• Employee Assistance Program (EAP)
• (K) Retirement savings plan with a generous company match
• Company paid life insurance
• Contests and appreciation events throughout the year full of prizes, food and fun!

Eligibility requirements may apply for the following benefits:

• Bonus based on company and/or individual performance
• Affordable benefit coverage, including medical, dental and vision
• Health Savings Account with company match
• Pre-tax Flexible Spending Accounts for healthcare and dependent care
• Company paid short-term disability coverage
• Paid parental leave for both mothers and fathers
• Paid holidays