Senior Security Engineer - Single Sign On

Come join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation and architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management and information technology security control support., Senior contributor, with accountability for researching, designing, and engineering information security (authentication, perimeter security, security & compliance tools, etc) & directory technology systems (software & hardware) and security policies / procedures. Utilizes in-depth technical / project knowledge and business requirements to design secure solutions to meet customer / client needs while protecting the Bank’s assets. Serves as organization spokesperson on specialized projects. Acts as a prime consultant on large projects that affect the organizations long-term goals and objectives. Exercises independent judgment in methods, techniques, and evaluation criteria for obtaining results. Provides direction and guidance to others in the group. Works under minimal supervision, with general guidance from Technical or Senior Technical Manager. Typically 7-10 years of IT experience.

• Bachelor’s degree or equivalent in Computer Science, Information Systems, Management Information Systems or equivalent experience
• 7+ years of overall IT experience
• Experience in leading teams on development or engineering efforts
• Strong hands-on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect, FIDO, SCIM, LDAP, SAML)
• Expertise in Identity and Authentication solutions such as Ping Identity (preferred), or Okta
• Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management
• Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine)
• Strong development background in Java/J2EE including web services (REST, SOAP)
• Strong understanding of RDBMS (relational database systems) like Oracle or MySQL including DB replication
• Understanding of large networks and systems and the interaction between applications, infrastructures, etc.
• Strong understanding of Public Key Cryptography
• Proficient in Linux, Windows, Tomcat, Web Logic, IBM WebSphere environments
• Strong communications, writing, and presentation skills
• Strong experience working in Agile development process and a deep understanding of various phases of the Software Development Life Cycle
• Strong understanding of Problem, Incident and Change management concepts
• Experience in production support of high available applications

Desired skills:

• CISSP/Security+/SANS certifications
• Experience in Big Data technologies like Hadoop
• Familiarity with deployments and integration of solutions within the cloud (Azure, AWS, or Google Cloud)
• Understanding of Continuous Integration / Contiguous delivery (CI/CD) concepts, tools and technologies