Senior Cybersecurity Engineer - IAM

The Identity and Access Management (IAM) team is responsible for securing employee access to our core applications in the most efficient, compliant, and user-friendly manner, innovatively using the latest industry standards and tools. Our goal is to become the gold standard for IAM worldwide, and we are already on our way, recently winning Oracle’s annual Identity Management Innovation award.

Visa's IAM eco-system includes an extensive, and highly customized, rich Identity Management platform implementation. The team has successfully implemented many of the core components. With a constant moving and expending environment, the IAM team is exploring all processes and technology to expend the security coverage and improve the end user experience. With the additional features and the goal of extensive coverage comes a higher level of complexity, criticality, overall usage, and dependency on the environment.

We are seeking an experienced Senior Cybersecurity Engineer with development background to become a member of our Global team of IAM experts to lead and influence further development, operations, and support of the IAM environment as well as collaborate with Visa eco-system IT teams and Cybersecurity stakeholders. The successful candidate will have a fundamental understanding of networking and security concepts as well as hands-on in-depth experience with a programming/scripting language. In addition, the candidate should possess the ability to troubleshoot and resolve complex issues, and the willingness to take on challenges.

Essential Functions:

• Perform maintenance and implementation of various enterprise Identity and Access Management components like Sailpoint, ForgeRock.
• Deploy and maintain Windows & Linux servers infrastructure hosting Visa system administrators for their day-to-day operational activities
• Develop and deploy Windows user applications using PowerShell scripting
• Partner and collaborate closely with globally distributed customers, and Management, Development team, and the Quality Assurance team to communicate issues and proposed solutions
• Requires availability to meet with teams in US at least 2 nights weekly and availability for weekend on-call rotations
• Perform service recovery including analysis, documentation, recommendations, and remediation of IAM related incidents
• Own and support the below listed BAU operations on daily basis
  • Triage incidents and ensure incidents are resolved within predefined SLAs
  • Data analysis
  • Documentation of the root cause
  • Recommendations for remediation
  • L3 Support
  • Platform BAU Support
  • Follow Visa’s Golden Rules of operations
  • Daily Health monitoring
  • Participate in Tiger Team and MIM call
  • Produce Situation reports
  • Upkeep of Run Book/ SOP/ Concept of Operations
  • Alerting & Monitoring of T0 application
  • Identify & Automate manual efforts
  • Knowledge base documentations
  • Support incidents & regular platform BAU activities
  • Drive security patching on production environment
  • Ensure platform team KPI & SLAs are maintained
  • Support patching, upgrades and vendor hot fixes
• Participate in ITDR exercise and implement Red button solution for in scope application
• Drive initiative to implement automatic installation and patching mechanism for self-healing solutions or bulk platform install/updates.
• Devise best practices for infrastructure management and maintain a wiki on common environment issues to ensure developers and QA engineers can learn and apply from it.
• Own & build tools to manage On Premise and Cloud Infrastructure.
• Be open to learning and managing IAM infrastructure and products as per business need
• Devise best practices for infrastructure management and maintain artifacts for common environmental issues, the concept of operations, admin guide
• Partner and collaborate with the global team across time-zones
• Provide weekly on-call support and publish on-call handover report (will require out-of-business hours and weekend support based on the published roster)
• Publish daily and weekly report for management
• Design and implement Service metrics and activity reports
• ITIL 4.0 , AWS, Azure, Linux, and Windows admin certification will be an added advantage

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Requirements

Basic Qualifications:
• 5+ years of relevant work experience with a Bachelor’s Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.

Preferred Qualifications:
• 6 or more years of work experience with a Bachelors Degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD
• 8 or more years of work experience with an engineering degree or equivalent
• 5+ years of experience in Linux and Windows administration and configuration
• 5+ years of experience in managing and supporting T0/T1 mission-critical applications deployed across global data centres
• 5+ Years administering troubleshooting and optimizing High Availability solutions.
• 5+ Years of experience in working with networking tools and programming/scripting languages (Java, Unix Shell, C#, PowerShell, or Perl
• 5+ Years of experience in operation management, incident management, CHG and problem management
• 6+ Yeas of experience in Identity and Access Management. Well versed with key IAM functions (e.g. Joiner Mover Leaver, User Access Revalidation, Single Sign On, Privileged Access Management, Multi Factor Authentication).