IAM Infrastructure Engineer

• Review the design for Modern Access Control infrastructure with architecture and engineering teams
• Deploy system capabilities incrementally and provide user authentication, SSO, federation, Role-Based and Attribute-Based Access Control
• Manage auditing and reporting capabilities that are integrated with Citi enterprise logging and monitoring tools
• Provide in-depth and sophisticated analyses, technical guidance and direction and identify and monitor key indicators to gauge performance and identify trends
• Identify and resolve issues, engaging in Root Cause Analysis (RCA)
• Understand diverse stakeholder needs and share and influence stakeholder expectations

• 6+ years' experience implementing, operating, building and maintaining access management solutions (Ping Access, Ping Federate, Ping Directory) supporting single sign-on (SSO) with 4+ years' experience in Unix/Linux
• Demonstrated experience with authentication and authorization technologies and protocols such as SAML, WS-Fed, OAuth, OpenID/OpenID Connect, one-time passcodes, PKI, FIDO, PBAC, RBAC
• Experience in managing projects, leading operational process change and improvement and delivering infrastructure technologies products and services
• Experience in financial services or large complex and/or global environment preferred
• Demonstrated ability to both work independently and partner with virtual teams in a high-pressure matrix environment
• Demonstrated ability to take ownership of various parts of a project/initiative with tight deadlines or unexpected changes in expectation/ requirements
• Consistently clear and concise written and verbal communication with ability to communicate technical concepts to a non-technical audience

Knowledge of containerization technologies such as Docker and container orchestration with Kubernetes is a big plus