IT Security Engineer III

This IT Security Engineer III position is with Sprouts Farmers Market in Phoenix, AZ. Overview The Security Engineer III is a senior individual contributor responsible for designing, implementing, and continuously improving the organization’s cybersecurity infrastructure and security controls. This role provides technical leadership across security engineering, identity and access management, endpoint and data protection, cloud security, compliance, and threat prevention. The role owns the end-to-end lifecycle of security controls, from design and implementation through monitoring, validation, and continuous improvement. Working closely with Infrastructure, Applications, Retail Systems, Legal, Risk, HR, and business partners, the Security Engineer III is responsible for developing automation, integrations, and scalable solutions that enhance security effectiveness, improve efficiency, and reduce manual effort. The role reports to our Store Support Office in Phoenix, AZ, with a hybrid work arrangement requiring in-office presence Tuesday through Thursday. Overview of Responsibilities Security Architecture & Engineering • Design and implement enterprise security solutions across network, endpoint, cloud, identity, email, and data protection domains. • Assess and enhance the organization's security architecture to address emerging threats and vulnerabilities. • Configure and maintain secure system settings and hardening standards, including alignment to applicable benchmarks and best practices. • Research, evaluate, and recommend new security technologies, tools, and proof-of-concept solutions. • Integrate security controls into infrastructure and application deployments through partnership with cross-functional teams. • Support cloud security initiatives across Microsoft Azure and related services. Security Operations & Threat Management • Monitor security alerts, analyze logs, investigate threats, and coordinate remediation activities. • Develop and implement response strategies for detected threats, minimizing business impact and reducing risk exposure. • Serve as an escalation point for security incidents and security-related operational issues. • Troubleshoot and resolve security technology failures and control gaps. • Develop automation and integrations that improve monitoring, reporting, detection, and remediation capabilities. Identity, Endpoint & Data Protection • Administer and maintain identity security controls, including SSO, SAML, SCIM, conditional access, MFA, and privileged-access management. • Manage endpoint security technologies, including endpoint protection, privilege management, device compliance, and endpoint hardening. • Oversee data loss prevention, email security, and information protection controls. • Secure and enable enterprise AI/LLM adoption, including application discovery, data-egress and DLP controls for AI tools, and sanctioned-application enablement. • Manage encryption, authentication, credential, key management, and enterprise secrets-management solutions. • Conduct privileged account, service account, and access governance reviews. Security Governance, Risk & Compliance • Support enterprise information security governance, risk, and compliance initiatives. • Perform security assessments and recommend improvements to strengthen security posture. • Execute recurring security controls and provide audit evidence for compliance reviews. • Evaluate risks associated with vendors, suppliers, and third-party partners and recommend mitigation strategies. • Assist with compliance activities aligned with applicable regulatory and security frameworks. • Develop and maintain security policies, standards, procedures, and technical documentation. Security Leadership & Collaboration • Lead security-focused projects and initiatives. • Provide technical guidance and mentoring to other security team members. • Drive security requirements through partner teams' implementation and change-management processes. • Deliver security awareness and best-practice education to employees and stakeholders. Participate in a shared 24/7 on-call rotation as required. #LI-LM1 Qualifications Knowledge Skills & Abilities • Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent combination of education and experience. • 5+ years of cybersecurity, information security, or related IT engineering experience. • Demonstrated ownership of enterprise security platforms from design through implementation and operational support. • Strong knowledge of security architecture, risk management, endpoint security, identity security, cloud security, and network security principles. • Experience implementing and managing security technologies in enterprise environments. • Strong understanding of network protocols, encryption standards, authentication technologies, and security best practices. • Experience with security automation, scripting, API integrations, and operational efficiency initiatives. • Knowledge of compliance and security frameworks such as NIST CSF, CIS Controls, and SOX-related controls. • Strong analytical, troubleshooting, and problem-solving skills. • Excellent written, verbal, and interpersonal communication skills. • Ability to manage multiple priorities in a fast-paced environment. Preferred Technical Experience • Microsoft Azure (IaaS, PaaS, Entra ID, Exchange Online) • Active Directory • Okta or Microsoft Entra ID • Netskope or comparable SASE/SWG/CASB platforms • Proofpoint or other secure email gateway solutions • CrowdStrike Falcon • BeyondTrust or equivalent Privileged Access Management tools • Microsoft Purview • SIEM and security monitoring platforms • Intune, Endpoint Manager, and Configuration Manager • Windows Server administration • Windows 10/11 endpoint management • ServiceNow (ITSM/SecOps) • PowerShell, Python, and REST API integrations • DevSecOps and CI/CD security practices • Network security technologies including firewalls, NAC, IDS/IPS, and Zero Trust architectures Preferred Certifications • CISSP preferred • GIAC certifications • Microsoft Security certifications • CCSP, Security+, or equivalent industry certifications • ITIL 4 knowledge preferred Core Competencies • Communication • Customer Focus • Driving for Results • Positive Approach Benefits In addition to a rewarding career, Sprouts offers a comprehensive program to help support you and your family. These programs include: • Competitive pay • Sick time plan that you can use to support you or your immediate families health • Vacation accrual plan • Opportunities for career growth • 15% discount for you and one other family member in your household on all purchases made at Sprouts • Flexible schedules • Employee Assistance Program (EAP) • 401(K) Retirement savings plan with a generous company match • Company paid life insurance • Contests and appreciation events throughout the year full of prizes, food and fun! Eligibility requirements may apply for the following benefits: • Bonus based on company and/or individual performance • Affordable benefit coverage, including medical, dental and vision • Health Savings Account with company match • Pre-tax Flexible Spending Accounts for healthcare and dependent care • Company paid short-term disability coverage • Paid parental leave for both mothers and fathers • Paid holidays Get Paid Every Day! Sprouts Farmers Market offers DailyPay - if you’re hired as an eligible employee, you’ll be able to transfer the money you’ve already earned at no extra cost, and get it the next business day, for free.  We offer DailyPay so you don’t have to wait for payday to access the money you’ve already worked for. With DailyPay, you can see how much you’ve made every day and you can transfer your money any time before payday. You can learn more by visiting https://www.dailypay.com/partners/sprouts-farmers-market/. Why Sprouts Grow with us! If you have a passion for inspiring people and a flair for fresh food, consider applying for a job at Sprouts! With a focus on customer service, our neighborhood grocery stores offer high-quality, farm fresh produce, natural meats, plenty of scoop-your-own bulk goods and much more in a fun, friendly, old-fashioned farmer’s market setting.  Come grow your career in healthy living with a fast-paced, rapidly growing company and teams that pride themselves on empowering others along their journey. At Sprouts, we’re committed to fostering an inclusive, respectful, and caring workplace culture. Our Team Member Resource Groups (TMRGs) create spaces for connection, support, and growth. Every team member is welcome to join one or more of our five groups: • Inspiring Women at Sprouts • Rainbow Alliance at Sprouts • Sabor at Sprouts • Soul at Sprouts • Honored to Serve at Sprouts Together, these groups celebrate diversity and empower our team to thrive. The above statements are intended to describe the general nature and level of the work being performed by people assigned to this work. This is not an exhaustive list of all duties, responsibilities, and requirements. Sprouts’ management reserves the right to amend and change duties, responsibilities, and requirements to meet business and organizational needs as necessary. Sprouts will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Chance in Hiring Ordinance. California Residents: We collect information in accordance with California law, please see here for more information.