Access Management - Vice President

Summary & Role Description The lead engineering role will serve as a GCS (Global Cyber Security) subject matter expert collaborating with the development, platform and architecture teams to implement and support various security related products.  The Lead Security Engineering (VP) role will engage with business and support personnel to design, implement and maintain robust, secure and user friendly solutions.  Technologies include Identity and Access management, Multi-Factor Authentication and Single SignOn. Responsibilities include: Co-design and implement a comprehensive strategy to deliver continuous improvements to our systems security posture Develop, mentor, and lead a high-performing team of security experts Be part of long-term security strategy development and execution. Develop a strategic approach to driving organizational changes by building and leveraging, enhancing existing methodologies and tools; develop and present recommendations for collaboration among different engineering and technology functions. Ability to evolve security strategy based on research, data, and business trends Experience with public cloud-native security setups and integrations Oversee implementation of multiple key cyber engineering initiatives, working closely with line management responsible for executing change; define associated change management imperatives and required resources. Work closely with global technology, application engineering teams at state street to develop strategy, and implement “zero trust” layered security initiatives. Manage governance, cyber SDLC processes, ensuring regular communication and across the cross-functional teams. Deliver engineering solutions, agile execution discipline and enable Street to have a world-class capability to effectively address the increasingly complex and rapidly evolving security needs of the Bank. Engage with, influence all organization levels, drive partnership and trust and ensure practical strategic cyber priorities. Leading the development, deployment and management of Access Management solutions. Designing highly resilient Authentication infrastructure Designing and developing secure integration between Authentication security tools and the application layer.  Designs will include both on-prem and SaaS applications and the supporting infrastructure. Designing and developing integration of MFA through Single SignOn solutions using SAML, OIDC, OAuth and Session management tools Assisting application teams with integration of MFA access control tools to ensure compliance Serving as subject matter expert and point of escalation for security product operations team Developing standard operating procedures and technical guidelines for security product operations team Working with multiple vendors on product integration issues Developing operating workflows, reporting tools, and utilities Collaborating with other areas of the corporation to help create effective MFA security practices Core/Must have skills 18+ years of work experience and has been part of a large-scale Access Management implementations Strong leadership skills Experience with complex software integrations and migrations Ability to define and manage complex projects Strong Knowledge of Transmit, ForgeRock, MFA and SSO Expertise with SAML and OIDC / OAuth Expertise with Microsoft Entra ID and Single Sign On Expertise with RSA Authentication Manager and MicroSoft Authenticator Expertise with LDAP protocol and directory design Ability to perform light programming and scripting using tools such as java, javascript, unix shell scripting, powershell, python, perl Strong knowledge of secure configuration management Strong knowledge on devops and CI/CD Strong knowledge of identity and access management controls and principles Knowledge of cloud technologies and common technology stacks. Understanding of AWS and Azure public cloud deployments Knowledge of common web servers, operating systems and network