Principal Engineer, Identity Security

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY
Sony Corporation of America, is seeking a Principal Engineer, Identity Security, to join the Corporate Information Security Division and Global Security Incident Response Team located in Reston, Virginia in a remote or hybrid role.  

This position will report to the Senior Manager, Cyber Defense Engineering. The individual will be responsible for working directly with Sony’s Global Information Services to review and advise on the security engineering, design, and support implementation to a wide variety of areas including Active Directory, Entra ID, M365, cloud, networking, file storage, product selection, and more. 

The Cyber Defense team is a pivotal part of Sony’s program to secure its information assets, services, and the products that depend on them, building trust with customers and stakeholders and protecting the privacy of Sony’s customers.  

JOB RESPONSIBILITIES 

• Lead and support security engineering efforts for Microsoft and Identity Management platforms, including developing and executing strategies to enhance Active Directory and Entra ID security, designing and securing complex environments, and collaborating on global initiatives. 

• Support and lead identity-related security incidents and contribute to the development of threat detection rules and response engineering operations. 

• Review and assess new system designs and infrastructure modifications for security implications and configure and deploy cybersecurity tools across on-premises and cloud environments. 

• Onboard and integrate data from systems into GSIRT’s SIEM system.  Evaluate, produce, and improve operational processes, procedures, and documentation. 

• Assess vulnerabilities and security risks for potential impact to SGCs and work with SGCs to prioritize remediation or deployment of mitigating controls. 

• Provide technical guidance and mentorship to other security engineers and team members. 

• Collaborate with cross-functional teams, including IT operations, security governance, legal, privacy, application development, and external vendors to ensure the security of Sony systems. 

• Role requires flexible work hours and on-call duties during non-standard business hours to support the needs of global businesses. 

• Other duties related to cyber defense as assigned. 

QUALIFICATIONS FOR POSITION 

Your qualifications and experience should include:  

• At least 10 years of experience in enterprise-level security engineering, including configuration management, handling identity-related security incidents, and managing complex Active Directory environments. 

• Extensive experience with Microsoft Entra ID, Active Directory, M365, and Azure Cloud, including advanced features such as OAuth flows, Zero Trust, passwordless authentication, and multi-domain Active Directory management. 

• In-depth knowledge of modern authentication protocols (SAML, OpenID Connect, OAuth2, Kerberos, LDAP). 

• In-depth knowledge o