Sr Lead Cyber Security Engineering

About the Role

We are seeking a highly skilled Tech lead with deeper expertise in various security products, authentication, authorization, access management, governance. As a key member of Workforce Authentication and Authorization team you lead a team to play a vital role in ensuring the secure implementation of various solutions (Hybrid and Cloud).

Responsibilities

• Lead Identity centric Workforce Security solutions team to develop authentication and access management solutions
• Drive the development of identity solutions, access patterns, modern security protocols, practicing Zero trust, least privileged, defense in depth principles
• Review and provide feedback on Identity and access management related security solutions proposed by stakeholders and can provide consultation to the partners and IT Management
• Act as Workforce cybersecurity expert in solutions spanning end user computing, proxy solutions, MFA, SSO, conditional accesses, Passwordless, Yubikey, bio-metric solutions, identity and governance scenarios, Secrets Management, automation, role based access control, Privileged identity management, Just in time accesses
• Participate in solutions to support token handling, OIDC/OAuth flows, authorization patterns, identity federation, cloud architectures, cryptography, cloud native services, cloud security
• Support operations in troubleshooting complex identity scenarios with hands-on experience on Sentinel/KQL/Audit logs

Required Qualifications

• Bachelor's degree in computer science or a related discipline and experience in information security, or an equivalent combination of education and work experience
• Ten years of experience in the Information Security role
• Five years of experience as a Tech lead
• Deep knowledge of application or infrastructure systems architecture, usually having experience with multiple system technologies
• Excellent consultative and communication skills, and the ability to work effectively with client, partner, and IT management and staff
• Strong collaboration skills and analytical ability

Required Skills

• In-depth knowledge and experience on Entra ID, EPM, Sentinel, Azure, AWS Security
• Knowledge on Okta, PingFederate, Entitlement management solutions
• Strong knowledge on Identities management on Azure AD with OAuth, OIDC, SAML, SSO, MFA, Conditional access policies, MFA, Kerberos, LDAP, Identity Federations
• Experience in providing security solutions for Java based Micro services, React based frontends and Android/iOS based mobile applications on the Azure
• Hands-on experience in JWT, session handling, Code signing, Certificate authentication, TLS/SSL, API Security, Application registration, application integration scenarios
• Awareness of API Management, Firewalls, DLP, VPNs, DNS, Azure Defender, MCAS, Sentinel, WAFs, Application Gateways, NSGs, App Proxy, Radius clusters, CDN
• Good understanding of Cloud Infrastructure Entitlement Management solution (CIEM) to ensure smooth remediation of toxic combinations, high risk entitlements
• Understanding and application of threat modeling concepts and methodologies
• Understanding of Applications security, OWASP standards, security best practices, browser compatibilities/storages/cookies
• Deeper understanding on Cloud Security areas such as Policies, RBAC, activities, identities, privileged access management
• Good understanding of concepts related to docker Security, container orchestrations/Kubernetes
• Good understanding of AI concepts, Patterns and impact on identity and access management domain

Preferred Qualifications

• CISSP, CSSP, or Cloud security certification preferred
• Certifications on Azure, AWS security will be preferred

Pay

$114,500 - 194,700 USD

Benefits

• Retirement benefits (401k and pension)
• Health and welfare benefits (medical, dental, vision, spending accounts and disability)
• Paid time off
• Parental and caregiver leave
• Life & accident insurance
• Other voluntary and well-being benefits
• Discretionary bonus program that may include an equity component