Senior Level Senior Security Operations Engineer Jobs
Senior level senior security operations engineer jobs place experienced professionals in charge of threat detection strategy, incident response leadership, and the security programs that protect enterprise infrastructure at scale. Openings concentrate across Retail, Aerospace & Defense, and Technology & Software, with a mix of on-site, remote, and hybrid settings, and employers like Apple, Nordstrom, and Riot Games hiring at this level now.
Find JobsOverview
Showing 5 of 6+ Senior Level Senior Security Operations Engineer jobs
Job Description
This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.
Who We Are
We're a fast-moving retailer with a lot going on, and our customers and employees count on us to keep their experience seamless and secure. Behind that experience is a team obsessed with getting identity right — making sure the right people, and the right non-human identities, have the right access to the right things, at the right time, and nothing more. The Identity Security team sits at the center of Nordstrom's security program, and we're looking for a senior leader to own the operational engine that keeps it running.
The Role
As Senior Manager, Identity Security Operations, you own the Identity Security Operations function end to end — the health, reliability, security posture, and service delivery of Nordstrom's enterprise identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, and BeyondTrust. You lead a multi-layered organization of managers, leads, engineers, and analysts spanning onshore, offshore, and contingent staff, and you're accountable for how identity operations perform at enterprise scale.
This is a senior leadership role with real ownership. You'll set the operating model, multi-year operational roadmap, and drive the automation and maturity agenda that reduces toil and risk over time. You'll partner as a peer with Identity Engineering & Build on what enters steady state and on what "supportable" means before it ships.
A Day in the Life
- Own the Identity Security Operations & Maintenance function: strategy, operating model, staffing plan, budget, and multi-year operational roadmap
- Lead through managers and senior individual contributors; build bench strength, succession, and a durable leadership layer beneath you
- Set and hold the bar for operational excellence — SLAs, KPIs, service health, and executive-level operational reporting for identity services
- Own major incident command, problem management, and change governance for identity; drive rigorous post-incident review and durable remediation
- Own access lifecycle operations at scale: joiner-mover-leaver, provisioning and deprovisioning, MFA operations, access certification campaigns, and privileged access operations
- Drive the automation and toil-reduction agenda, converting repeatable operational work into engineered, self-service, and automated capability
- Partner with Identity Engineering & Build to define transition-to-operations standards, ensuring new capability is observable, documented, and supportable before production
- Own vendor, managed-service, and licensing relationships for identity platforms; manage contract and renewal cycles alongside Sourcing and Finance
- Serve as the senior escalation point and accountable owner for identity operations in audit, regulatory, and compliance engagements (PCI-DSS)
- Represent identity operations with clear, decision-ready communication
You Own This If You Have
- 10+ years in identity and access management, information security, or IT operations, including 7+ years leading teams and at least 5 years leading leaders or owning a function
- Deep operational ownership of enterprise identity platforms at scale — an enterprise IdP (Microsoft Entra ID and/or Okta), directory services (Active Directory), IGA (SailPoint), and PAM (BeyondTrust)
- Strong command of authentication and authorization fundamentals — SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management — with enough depth to lead technical decisions credibly
- Proven track record running ITIL-aligned operations at enterprise scale: SLA ownership, major incident command, problem and change management, on-call models
- Experience owning budget, headcount planning, and vendor or managed-service relationships
- Experience as an accountable owner in audit and compliance programs (SOX, PCI-DSS)
- Demonstrated ability to build and retain high-performing teams, and to communicate credibly with both engineers and executive leadership
- Bachelor's degree in a related field or equivalent experience
Nice to Have
- Retail, or another large, distributed, high-transaction-volume enterprise
- Experience operating identity through a major platform migration or consolidation
- Depth in passwordless/FIDO2, Zero Trust operational patterns, and identity threat detection and response (ITDR)
- Experience leading globally distributed and managed-service delivery teams
- Relevant certifications (CISSP, CISM, SC-300, ITIL)
#LI-Hybrid
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
Job Description
This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.
Who We Are
We're a fast-moving retailer with a lot going on, and our customers and employees count on us to keep their experience seamless and secure. Behind that experience is a team obsessed with getting identity right — making sure the right people, and the right non-human identities, have the right access to the right things, at the right time, and nothing more. The Identity Security team sits at the center of Nordstrom's security program, and we're looking for a senior leader to own the operational engine that keeps it running.
The Role
As Senior Manager, Identity Security Operations, you own the Identity Security Operations function end to end — the health, reliability, security posture, and service delivery of Nordstrom's enterprise identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, and BeyondTrust. You lead a multi-layered organization of managers, leads, engineers, and analysts spanning onshore, offshore, and contingent staff, and you're accountable for how identity operations perform at enterprise scale.
This is a senior leadership role with real ownership. You'll set the operating model, multi-year operational roadmap, and drive the automation and maturity agenda that reduces toil and risk over time. You'll partner as a peer with Identity Engineering & Build on what enters steady state and on what "supportable" means before it ships.
A Day in the Life
- Own the Identity Security Operations & Maintenance function: strategy, operating model, staffing plan, budget, and multi-year operational roadmap
- Lead through managers and senior individual contributors; build bench strength, succession, and a durable leadership layer beneath you
- Set and hold the bar for operational excellence — SLAs, KPIs, service health, and executive-level operational reporting for identity services
- Own major incident command, problem management, and change governance for identity; drive rigorous post-incident review and durable remediation
- Own access lifecycle operations at scale: joiner-mover-leaver, provisioning and deprovisioning, MFA operations, access certification campaigns, and privileged access operations
- Drive the automation and toil-reduction agenda, converting repeatable operational work into engineered, self-service, and automated capability
- Partner with Identity Engineering & Build to define transition-to-operations standards, ensuring new capability is observable, documented, and supportable before production
- Own vendor, managed-service, and licensing relationships for identity platforms; manage contract and renewal cycles alongside Sourcing and Finance
- Serve as the senior escalation point and accountable owner for identity operations in audit, regulatory, and compliance engagements (PCI-DSS)
- Represent identity operations with clear, decision-ready communication
You Own This If You Have
- 10+ years in identity and access management, information security, or IT operations, including 7+ years leading teams and at least 5 years leading leaders or owning a function
- Deep operational ownership of enterprise identity platforms at scale — an enterprise IdP (Microsoft Entra ID and/or Okta), directory services (Active Directory), IGA (SailPoint), and PAM (BeyondTrust)
- Strong command of authentication and authorization fundamentals — SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management — with enough depth to lead technical decisions credibly
- Proven track record running ITIL-aligned operations at enterprise scale: SLA ownership, major incident command, problem and change management, on-call models
- Experience owning budget, headcount planning, and vendor or managed-service relationships
- Experience as an accountable owner in audit and compliance programs (SOX, PCI-DSS)
- Demonstrated ability to build and retain high-performing teams, and to communicate credibly with both engineers and executive leadership
- Bachelor's degree in a related field or equivalent experience
Nice to Have
- Retail, or another large, distributed, high-transaction-volume enterprise
- Experience operating identity through a major platform migration or consolidation
- Depth in passwordless/FIDO2, Zero Trust operational patterns, and identity threat detection and response (ITDR)
- Experience leading globally distributed and managed-service delivery teams
- Relevant certifications (CISSP, CISM, SC-300, ITIL)
#LI-Hybrid
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
See All 6 Senior Level Senior Security Operations Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Senior Security Operations Engineer Job Market
Who's Hiring
Top Industries Hiring
- Retail
- Aerospace & Defense
- Technology & Software
- Electronics & Hardware
- Construction & Real Estate
Senior Level Senior Security Operations Engineer Jobs: Frequently Asked Questions
How do I get a senior level senior security operations engineer job?
Employers hiring at this level look for candidates who have led incident response efforts, built or improved detection engineering pipelines, and mentored junior analysts. Demonstrated ownership of SIEM tuning, threat intelligence integration, or SOC process improvements sets strong candidates apart. Certifications like CISSP, GCIA, or GCIH signal depth, but hands-on leadership experience and the ability to drive security program outcomes carry the most weight at this stage.
Which companies hire senior level senior security operations engineers?
Companies hiring senior level senior security operations engineers right now include Apple, Nordstrom, and Riot Games, based on current listings on Migrate Mate as of September 2026. Hiring at this level covers large enterprises with mature security operations centers, government contractors, and growth-stage technology companies building out their detection and response capabilities.
Are there remote senior level senior security operations engineer jobs?
Yes, remote and hybrid opportunities exist at this level, though some roles require on-site presence for cleared or highly regulated environments. About 20% of senior level senior security operations engineer openings are remote or hybrid as of September 2026, reflecting broader demand for experienced security professionals who can lead distributed teams and operate across cloud-native and hybrid infrastructure environments.
What makes a senior security operations engineer role senior level?
Senior level roles go beyond executing runbooks and triaging alerts. They involve owning detection strategy, defining escalation procedures, and driving continuous improvement across the SOC. Senior engineers are expected to mentor analysts, evaluate and integrate new tooling, and collaborate with engineering and leadership on security architecture decisions. The scope is broader, the ambiguity is higher, and the expectation is that you lead outcomes rather than wait for direction.
Which industries hire the most senior level senior security operations engineers?
Senior level senior security operations engineer roles concentrate in Retail, Aerospace & Defense, and Technology & Software, based on current listings on Migrate Mate as of September 2026. These sectors drive hiring at this level because they operate complex, high-value environments, face significant regulatory and threat pressure, and require seasoned professionals who can own security operations programs rather than simply staff them.