Senior Vice President, Identity and Authentication Engineer

About the role

This role is based in Pittsburgh, PA or Lake Mary, FL.

In this role, you’ll make an impact in the following ways:

• Design, implement, and support a highly available and scalable SiteMinder federation and web access management environment across enterprise platforms.
• Lead the configuration and maintenance of federation services using industry-standard protocols such as SAML 2.0, OAuth, and OpenID Connect, including Identity Provider (IdP) and Service Provider (SP) integrations.
• Design, implement, and support Azure AD / Microsoft Entra ID-based single sign-on (SSO) integrations for enterprise and cloud applications, ensuring secure and seamless access experiences.
• Develop and manage access control policies, realms, rules, and responses to secure critical applications, data, and enterprise resources.
• Partner with application, infrastructure, and security teams to deliver seamless single sign-on (SSO) integrations, troubleshoot complex authentication and authorization issues, and enhance the overall user access experience.
• Build and support automation solutions to streamline onboarding, configuration, deployment, monitoring, and operational support activities across the identity and access management environment.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent combination of education and practical experience.
• 10-12 years of experience in information security or related technology experience required; experience in the securities or financial services industry is a plus.
• Significant experience supporting enterprise identity and access management platforms, with strong expertise in SiteMinder administration and federation services.
• Demonstrated hands-on experience with single sign-on and federation technologies, including SAML, OAuth, and OpenID Connect.
• Hands-on experience implementing and supporting Azure AD / Microsoft Entra ID SSO, including application integration, conditional access considerations, and federation with enterprise identity platforms.
• Strong knowledge of LDAP concepts, directory structures, schema, queries, authentication flows, and integration with enterprise identity stores.
• Strong development and scripting skills with experience in automation using technologies such as Python, Shell scripting, PowerShell, REST APIs, or similar tools.
• Strong understanding of authentication, authorization, SSL/TLS, certificate management, and secure access controls within complex enterprise environments.
• Excellent problem-solving, collaboration, and communication skills, with the ability to work effectively across cross-functional teams and support mission-critical authentication services.

About the company

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance.