Lead Information Security Engineer – IAM Operations Full Time

Job Description

Value Preposition

As part of the Identity and Access Management (IAM) team at First Citizens Bank, the Cyber Security Engineer will be responsible for supporting, analyzing, configuring, and maintaining Privileged Access Management (PAM) solution. This person should possess strong analytical and technical problem-solving skills as well as experience in the different phases of the system life cycle, to support multiple projects, development of SOP’s and day-to-day functional administration and support for PAM. The engineer should have in-depth experience in management of passwords/credentials (such as default accounts, service accounts, keys, etc.) in PAM solutions

Job Details

Position Title: Lead Information Security Engineer – IAM Operations

Career Level: P3

Job Category: Manager

Role Type: Hybrid

Job Location: Bangalore

About The Team

The Identity and Access Management (IAM) Program supports end-to-end access management for all employees, contractors and the systems and applications to which access is granted.

Impact (Job Summary/Why This Role Matters)

This position resides within the Cyber Security organization supporting the deployment, engineering and ongoing maintenance of the tools and the systems they utilize to keep the IAM program moving forward. This will be an individual contributor role reporting directly to the IAM Program Manager.

Key Deliverables

Performs installation, configuration, implementation and troubleshooting of IAM services.

Documents IAM runbook, playbooks, and administration tasks as appropriate.

Interfaces with Application, IT, Infrastructure and Support teams for application integration and runtime issues to the IAM platform.

Delegates IAM tasks and support to Tier-1 and Tier-2 as appropriate.

Handles production change management per FCB policies.

Provides primary Level 3 support on IAM issues.

Functional Skills

Skills and Qualification

The ideal candidate will have a background with engineering and administration of the technologies listed below as well as be someone who is driven and can work under pressure to support quick turn-arounds on deliverables. It is expected as a principal engineer, that the candidate will be able to lead projects, be a key resource for incident escalation and drive new technologies. The candidate must have good soft skills to work across multiple teams and domains.

Technical/Business Skills

6+ years’ experience supporting mission critical systems within an IT Engineering and Operations environment.

4+ years’ experience working with IAM tools (SailPoint IdentityIQ, PingFederate and RSA) in a regulated environment.

4+ years’ solid working experience with AD infrastructure tools

4+ years’ building or supporting Microsoft Windows Servers 2016/2019

4+ year’s building or supporting Linux Application Appliances/Servers

Experience with Database Administration (Oracle, MSSQL).

SailPoint IdentityIQ

Troubleshoot and resolve technical problems reported by end user or application team.

Document problem solutions in the company knowledge base.

Provide technical support to SailPoint and field personnel via multiple channels, including telephone, email, Microsoft team meetings, and ticketing system.

Lead the incident call with diverse stakeholder.

Apply and test fixes in Non-Prod, and Production environment.

Deep understanding of Joiner, Mover, and Leaver’s process

Hands-on experience on IAM reporting with SQL server as back end.

Experience with XML, SQL and a J2EE / Java EE 5 Application Server such as Tomcat

Understanding such as Identity Cubes, Connectors, Roles, Policies, and Access Certifications.

Experience in Access Request and Approval Workflows

Experience in configuring Application, Rules, Workflows, custom tasks and connectors.

PingFederate Single Sign-On (SSO) administration

Version Upgrades

Security Vulnerabilities patching

Application Integration IDP/SP Initiated Auth Workflows – Using varies protocols SAML 2.0, OAuth 2.0, OIDC

Creating and Managing Auth-Policy Tree

Creating and Managing Authentication Adapters

Able to construct complex OGNL expressions.

SSL Management for Admin UI and SP Connections

RSA Authentication Manager

Version Upgrades

Security Vulnerabilities patching

End User Role Management

SSL Management for RSA Authentication Manager Security Console

RSA SecurID Cloud

Trouble shoot end user MFA registration issues.

Splunk

Understand how create queries and alerts.

Develop PowerShell scripts to automate manual functions or to perform queries.

Active Directory/LDAP administration and support

Expertise with MFA authentication mechanisms (e.g.,RSA, PingID)

ITIL familiarity or certification highly desired

IT Security or IT Operations experience within a Financial Services industry highly preferred

Accessibility Needs

We are committed to providing an inclusive and accessible hiring process. If you require accommodations at any stage (e.g. application, interviews, onboarding) please let us know, and we will work with you to ensure a seamless experience.

Equal Employment Opportunity

FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.