Cloud IAM Strategy Lead - Cyber Security Operations

Full time on W2 only

The Cyber Security Defense (CSD) function within Global Information Security is responsible for all aspects of threat intelligence and monitoring, application and network security, and insider threat. In addition, the CSD team drives out the enterprise-wide cyber exercise program.

At client, we're building Enterprise Cloud solutions that help power our customers' financial lives. Technology solutions are central to how we deliver for our customers and our business, and building modern, secure, scalable, performant cloud solutions are key to that aim.

We are looking for a highly experienced Identity and Access Management (IAM) strategy lead to join our Global Information Security (GIS) Cloud Defense Group. This role will report to the Head of Cloud Defense Cloud Strategy and is critical to our Cloud IAM Security strategy. You will be responsible for working closely with leaders in GIS and other parts of the Enterprise to co-develop our Cloud IAM strategy and to ensure that the solutions we deliver meet the needs of the business.

Responsibilities include:

• Collaborate across a multi-functional organization to drive the development of a coherent Cloud IAM strategy
• Perform gap analysis of current IAM solutions vs. desired end-state
• Develop and collaborate on roadmaps for controls and supporting technologies
• Ensure that Cloud IAM solutions are being developed in line with best practices and business needs
• Actively participate in requirements, architecture reviews, and design meetings
• Develop partnerships with external parties to develop understanding of best practices and industry direction
• This role may have people management responsibilities.

Required skills and qualifications:

• Deep experience in designing and implementing IAM solutions (on-premises and Cloud)
• At least 5 years of hands-on experience with IAM in Azure and AWS or GCP
• At least 3 years of architecture or strategy experience in Cloud IAM
• Hands-on experience in deploying complex solution architectures in Azure, AWS or GCP
• Hands-on experience with Azure Active Directory and identity federation
• Experience with designing and implementing MFA, SAML, RBAC solutions in Azure
• Deep understanding of Cloud services interactions (e.g., API key exchange, roles, groups, entitlements)
• Broad understanding of security principles and best practices (e.g., access control)
• Ability to communicate complex topics to audiences at multiple levels (executive to individual contributor)
• CCSK, CCAK or equivalent Cloud Security-specific qualifications
• Typically has 10-15 years technology experience

Nice to have:

• Experience with Linux and Windows systems administration
• Hands-on experience managing on-premises Active Directory
• Configuration management through automation
• Experience with tooling to detect and resolve Cloud Identity and entitlements issues (e.g., CIEM)
• Familiarity with Infrastructure as Code capabilities (e.g., Terraform, Azure RM, CloudFormation)
• Familiarity with common Information Security frameworks and standards (e.g., CIS, NIST, MITRE)
• CISSP, CCSP, CRISC, CISA or equivalent qualifications
• Financial Services experience is not necessary

We're looking for people who are passionate about Cloud security technologies, and about using them to solve interesting business problems for our customers. If you're collaborative, technical, and enjoy working on big challenges, we think you'll enjoy working with us.