Lead Security Engineer

At Bath & Body Works, everyone belongs. We are committed to creating a culture of belonging focused on delivering exceptional fragrances and experiences to our customers. We focus on recruiting, retaining, and advancing top talent. In addition, we work to improve our communities and our planet to help the world live more fully.

We are seeking a highly skilled and experienced Security Engineer to lead and support enterprise-wide Identity and Access Management (IAM) initiatives! This role will focus on designing, implementing, and maintaining secure access solutions including Privileged Access Management (PAM), Single Sign-On (SSO), Public Key Infrastructure (PKI), and directory services such as Ping, Entra ID and LDAP.

• Design and implement IAM solutions to manage user identities, authentication, and authorization across enterprise systems.
• Lead the deployment and management of PAM solutions to secure privileged accounts and credentials.
• Develop and maintain SSO integrations using SAML, OAuth, and OpenID Connect.
• Manage and enhance PKI infrastructure, including certificate lifecycle management, secrets management, and integration with enterprise systems.
• Administer and optimize LDAP directories and identity federation services.
• Collaborate with multi-functional teams to ensure secure access to applications, systems, and data.
• Conduct risk assessments, security reviews, and audits related to IAM and access controls.
• Develop and maintain automation scripts and tools to streamline IAM operations and compliance reporting.
• Stay ahead of emerging IAM technologies, threats, and standard methodologies.

Qualifications

Required:

• 5+ years of experience in Cybersecurity with a focus on IAM, CIAM, SSO, PKI and PAM.
• Hands-on experience with Ping Identity, CyberArk, Hashicorp, PingOne, Azure AD, SailPoint or similar platforms.
• Solid understanding of authentication protocols (SAML, OAuth, OIDC, Kerberos).
• Experience with PKI, certificate authorities, and encryption technologies.
• Proficiency in LDAP, Active Directory, and directory synchronization.
• Scripting skills (e.g., PowerShell, Python, Bash) for automation and integration.
• Familiarity with regulatory and compliance frameworks (e.g., SOX, HIPAA, NIST, ISO 27001).

Preferred:

• Relevant certifications such as CISSP, GIAC, Microsoft Certified: Identity and Access Administrator, or Ping Identity certifications.
• Experience with Zero Trust Architecture and Identity Governance.
• Knowledge of cloud IAM (AWS IAM, Azure AD, GCP IAM).

Soft Skills:

• Strong analytical and problem-solving skills.
• Superb communication and collaboration abilities, with the ability to translate technical concepts to non-technical key partners.
• Ability to lead projects and mentor junior engineers.
• Strong problem-solving and analytical skills, with attention to detail.

• Bachelors degree in Computer Science, Cybersecurity, or related field; or an equivalent combination of relevant education and experience.

Salary Target: 155k + Bonus

Core Competencies

• Lead with Curiosity & Humility
• Build High Performing Teams for Today & Tomorrow
• Influence & Inspire with Vision & Purpose
• Observe, Engage & Connect
• Strive to Achieve Operational Excellence
• Deliver Business Results

Benefits

Bath & Body Works associates are the heart of our business. Thats why we're proud to offer benefits that empower you to Dream Bigger & Live Brighter. Benefits for eligible associates include:

• Robust medical, pharmacy, dental and vision coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
• 401k with company match and Associate Stock Purchase with discount
• No-cost mental health and wellbeing support through our Employee Assistance Program (EAP)
• Opportunity for paid time off and paid parental leave. Plus, access to family and lifestyle programs including a family building benefit, childcare discounts, and home, auto and pet insurance.
• Tuition reimbursement and scholarship opportunities for post-secondary education programs
• 40% merchandise discount and gratis that encourages you to come back to your senses!

Visit bbwbenefits.com for more details.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links: Los Angeles Fair Chance In Hiring Ordinance , Philadelphia Fair Chance Law , San Francisco Fair Chance Ordinance .

We are an equal opportunity action employer. We do not make employment decisions based on an individuals race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.

Application window will close when all role(s) are filled.