Principal Engineer, Identity Security

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.

POSITION SUMMARY
Sony Corporation of America, is seeking a Principal Engineer, Identity Security, to join the Corporate Information Security Division and Global Security Incident Response Team located in Reston, Virginia in a remote or hybrid role.

This position will report to the Senior Manager, Cyber Defense Engineering. The individual will be responsible for working directly with Sony’s Global Information Services to review and advise on the security engineering, design, and support implementation to a wide variety of areas including Active Directory, Entra ID, M365, cloud, networking, file storage, product selection, and more.

The Cyber Defense team is a pivotal part of Sony’s program to secure its information assets, services, and the products that depend on them, building trust with customers and stakeholders and protecting the privacy of Sony’s customers.

• Lead and support security engineering efforts for Microsoft and Identity Management platforms, including developing and executing strategies to enhance Active Directory and Entra ID security, designing and securing complex environments, and collaborating on global initiatives.

• Support and lead identity-related security incidents and contribute to the development of threat detection rules and response engineering operations.

• Review and assess new system designs and infrastructure modifications for security implications and configure and deploy cybersecurity tools across on-premises and cloud environments.

• Onboard and integrate data from systems into GSIRT’s SIEM system. Evaluate, produce, and improve operational processes, procedures, and documentation.

• Assess vulnerabilities and security risks for potential impact to SGCs and work with SGCs to prioritize remediation or deployment of mitigating controls.

• Provide technical guidance and mentorship to other security engineers and team members.

• Collaborate with cross-functional teams, including IT operations, security governance, legal, privacy, application development, and external vendors to ensure the security of Sony systems.

• Role requires flexible work hours and on-call duties during non-standard business hours to support the needs of global businesses.

• Other duties related to cyber defense as assigned.

• At least 10 years of experience in enterprise-level security engineering, including configuration management, handling identity-related security incidents, and managing complex Active Directory environments.

• Extensive experience with Microsoft Entra ID, Active Directory, M365, and Azure Cloud, including advanced features such as OAuth flows, Zero Trust, passwordless authentication, and multi-domain Active Directory management.

• In-depth knowledge of modern authentication protocols (SAML, OpenID Connect, OAuth2, Kerberos, LDAP).

• In-depth knowledge of security controls applicable to on premises and cloud environments.

• Experience with Azure Cloud security, including the use of Azure Policy for auditing and automating configuration changes.

• Proficient in automation and troubleshooting using scripting languages (PowerShell, Python) and command-line interfaces, with experience in automating identity management tasks.

• Experience with CI/CD pipelines and Agile project management, with a preference for tools like GitLab.

• Preferred qualifications include a degree in Computer Science, Cyber Security, or a related field, and relevant certifications such as CISSP or CISM. Experience with device management using Intune is a plus.

• All candidates must be authorized to work in the US.

#LI-SC1

Sony is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), gender, national origin, citizenship, ancestry, age, physical or mental disability, military status, status as a veteran or disabled veteran, sexual orientation, gender identity or expression, marital or family status, genetic information, medical condition, or any other basis protected by applicable federal, state, or local law, ordinance, or regulation.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, Human Resources Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.