Description

You will build the firm’s next generation Policy Based Access Control (PBAC) solution within the Identity & Access Management team.

Responsibilities

• Collaborate with internal engineering teams to design PBAC solutions for infrastructure platforms and services.
• Develop, test, and deploy PBAC integrations for in-house and vendor products using policy-as-code and GitOps methodologies.
• Create detailed design documentation and present design decisions to internal governance forums.
• Partner with infrastructure teams to integrate on-premise, cloud, and SaaS solutions with the firmwide PBAC solution.

Required Skills

• Bachelor's degree in Computer Science, Engineering, Information Security, or a similar field.
• 3-5 years of experience in the IAM domain.
• Hands-on experience with CI/CD pipelines and deploying applications to Kubernetes (OpenShift/AKS).
• Experience with declarative languages for policy-as-code, such as Prolog or Rego.
• Proficiency in scripting languages including Python or PowerShell.
• Experience developing solutions using secure authentication protocols like OIDC, SAML, and mTLS.
• Understanding of IAM cloud platforms including Azure, AWS, or GCP.
• Ability to manage multiple tasks and deliverables simultaneously.

Preferred Skills

• Industry certifications such as CISSP or CISM.
• Cloud security certifications like Microsoft Certified Identity and Access Administrator Associate or AWS Certified Security – Specialty.
• Troubleshooting experience with SQL, Linux OS utilities, and PowerShell.
• Experience implementing PBAC solutions for application authorization.
• Experience with SailPoint IdentityNow or IdentityIQ IGA solutions.
• Strong technical documentation skills.

Key Skills

Education

Bachelor's degree