Senior Principal Software Engineer – CIAM Security

Plan, define, design, implement and maintain the solution architecture in the area of internal and external identity & access management solution in public and private cloud environments 

Adopt, implement and define guidelines using open standard identity protocols and mechanisms such as OAuth 2.0/ OpenID Connect, SAML 2.0, Federated Identity Management and SSO 

Assess overall cloud security posture at frequent intervals. Redesign or evolve the posture as necessary. 

Implement data-driven security analytics, reporting and monitoring initiatives and to support security incident analysis with your technical expertise. 

Researches, Implements and promotes the adoption of proactive security concepts, such as threat hunting and threat modelling to improve the existing security strategy. 

Drive architectural initiatives that align our business needs and technical capabilities for Identity Management solutions. 

6+ years of relevant experience in Identity & Access Management and Information Security 

8+ years of hands-on technical experience in implementing secure enterprise applications using cloud technologies 

Deep knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, Identity federation, Single Sign-On, RBAC, ABAC, MFA, RBA 

Good experience in Threat, Vulnerability & Risk management, Infrastructure security 

Strong working knowledge of Web Application Firewalls, HTTP(s), TCP/UDP, SSL/TLS, Forward and reverse proxies, Load balancers 

Strong understanding and development experience on Java, SpringBoot, RESTful Web Services and Microservices 

Working knowledge of Scripting languages (Python and PowerShell) 

Good understanding of the web application architectures, TCP/IP networking, cloud computing and data integrity and confidentiality including cryptographic techniques 

Demonstrable experience in Site Reliability Engineering and DDoS mitigation techniques 

Knowledge of SANS Top 20 Critical Security Controls and OWASP Top 10 vulnerabilities  

Strong communication skills and presentation skills, leadership skills, problem solving and analytical skills. 

Implementation of Technology specifications and/or RFCs 

Hands-on working experience with SailPoint, ForgeRock, Ping, Okta, OneLogin, Azure AD or similar IAM products 

Good understanding of data science methodologies. Distinguish between descriptive, diagnostic, predictive and prescriptive analytic capabilities and their applications 

Experience in implementing Security Analytics using AI and machine learning 

AWS Certifications 

Good understanding of SCIM2, U2F/UAF/FIDO2, HOTP, TOTP 

Working knowledge of containers and orchestration (Kubernetes) 

Experience in healthcare industry applications development and support 

Familiarity with security, privacy and compliance standards such as FISMA, FedRAMP, HIPAA, NIST800-53, NIST800-63 and GDPR