Citi Group Senior SAML PBAC L3 Support Lead SVP C14 

United States, Texas, Houston 

634756087

The Role:

We are seeking an experiencedSenior IAM Lead to function as the Authentication Operations team'sSME providing Level 3 support under the Identity & Access Management (IAM) organization for Citi. This opening is a result of the team's continued growth. The ideal candidate will bring an experienced background with a mix of skills in Information Technology (IT), Information Security/Risk Management, and Digital Transformation with strong alignment to the business requirements detailed below. This is a senior role that requires strong SME knowledge and soft skills interacting with technical and non-technical stakeholders. The position will report to global operations manager.

Responsibilities

• Participate and drive production incident resolution and root-cause analysis
• Apply a combination of risk and change management, security policies and controls, user account lifecycle management and access management best practices in solution recommendations
• Identify and define appropriate data sources, tools, and techniques for extracting application support data
• Continuously improve operating procedures and documentation to achieve service excellence
• Work with other Citi business and technical teams to identify functional requirements and utilize them in the identification, justification, and implementation of technical solutions
• Translate client's business requirements into specific system, application, or process designs
• Define and organize the application onboarding processes and the supporting service fulfillment efforts
• Communicate proposed work plans to the senior management and application support teams
• Provide hands-on mitigation of escalations and production issues when needed and set the proper expectations with the business
• Analyze trends based on recurring issues and provide solutions to improve processes and platforms
• Monitor and review service levels
• Take decisions independently and demonstrate accountability of outcomes
• Establish and operate Support Rotations

Qualifications

• 8-10+ years' experience Enterprise Single Sign On (SSO) and/or Multi-Factor Authentication (MFA) solutions with at least 3+ years' SME knowledge in the SAML federation technologies and Policy Based Access Control (PBAC) with any industry products (Plain ID is highly preferred)
• Strong, hands-on experience with Identity and Access Management (IAM) tools and processes
• Ability to break down complex information systems and view them as smaller building blocks and identify dependencies between them and with other systems
• Able to comfortably communicate with senior management and business stakeholders on progress updates and proposed plans
• Firm understanding of Service Operation processes (e.g., Request Fulfilment, Incident Management, Problem Management, etc.)
• Demonstrated ability to work under tight timelines with the ability to calmly mitigate any major production incidents as needed
• Experience in supporting complex, multi-tier, distributed systems - Webservers, App Servers, Network topologies (Demilitarized Zone, Firewall rules, etc.)
• Experience managing applications running on Red Hat Enterprise Linux (RHEL) and/or Windows Server 12 and above
• Firm understanding of Industry Standards such as OpenID, OAuth 2.0
• Experience supporting API integrations (REST, SOAP) and Mobile applications (iOS and Android)
• Experience in High-level Programming languages like Java and scripting languages such as JavaScript, Python.
• Knowledge of Broadcom SiteMinder and/or Ping Access solutions
• Ability to multitask and work autonomously as needed
• Excellent verbal and written communication
• Willingness to work outside normal working hours as needed to engage with global teams in the APAC region

Education

• Bachelor’s degree or equivalent experience
• Master's degree preferred
• Certifications such as ITIL, CISSP, or CISM are preferred

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Anticipated Posting Close Date:

View the " " poster. View the .

View the .

View the