Site Reliability Engineer - Authentication and IAM Vice President

Site Reliability Engineer - Authentication And Iam Vice President

Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We'll enable growth and progress together.

We are seeking a highly motivated individual with experience in the Identity and Access Management (IAM) and Information Security space. The Technical Lead Analyst is an experienced information security role responsible for the management, integration and operations of critical security infrastructure that includes token-based access management technologies, encryption systems, centralized network access control, and the automation of role & identity access.

The candidate will be a subject matter expert (SME) responsible for the integration and delivery of critical projects that are defined by our organizational goals. The responsibilities include managing the full application lifecycle from proof-of-concept and infrastructure build to the integration with business applications and ongoing operations support. Strong problem analysis and troubleshooting skills are essential. Linux knowledge is a must along with a solid understanding of scripting/network tools, database fundamentals, encryption methodologies, and security principals. Regular weekend work is expected.

Key responsibilities include:

• Manage the franchise critical security application infrastructure from a projects and integration perspective and from an operations subject matter expert (SME) support role.
• Ensure the internal controls and compliance standards adhere to Citi defined policies.
• Perform system development lifecycle testing and validation prior to promoting solutions to a production environment.
• Be proactive, identify opportunities to automate repetitive processes and procedures using Ansible and other automation solutions.
• Regularly engage with strategic vendors, partners, and clients on improving authentication services and meeting the organizational goals.
• Work with vendors and internal support groups to ensure the technology stack remains current and any end of vendor support (EOVS) is promptly remediated.
• Create complex project plans, perform impact analyses, solve/work high impact problems/projects, and provide resolution to restore services
• Troubleshooting incidents and problems in a timely resolution as defined in SLAs
• Document resolutions in Knowledge Base tools
• Capacity, Performance and Stability reporting and management
• Manage auditing and reporting capabilities that are integrated with Citi enterprise logging and monitoring tools
• Identify and resolve issues, engaging in Root Cause Analysis (RCA)
• Ensure ongoing compliance with regulatory requirements
• Has the ability to operate with a limited level of direct supervision.
• Acts as SME to senior stakeholders and /or other team members.
• Appropriately assess risk when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Must-have skills include 6+ years' relevant industry experience in one or more of the following:

• Experience with one or more below: Identity Access Management on Public Cloud such as AWS, GCP, Azure.
• Should have managed one or more Enterprise Authentication products.
• Onboarding new applications to OpenShift Container service environment.
• Network concepts and understanding of CISCO networking devices.
• Experience with one or more of Enterprise application servers such as IBM WebSphere, Apache Tomcat/HTTP Server, Tivoli Monitoring, Wide Load balancer setup, Virtual IP configurations.
• Experience in Ansible playbook creation for automation, Splunk Dashboard setup, RLM or Udeploy tool.
• Analyzing Authentication application metrics and deep knowledge on how to onboard legacy application to Cloud container platform services.
• Experience working in a Linux-based environment (RHEL, Ubuntu) that includes being conversant in terminal commands and developing shell or Perl scripts.
• Experience with critical production server support, application upgrades and project lifecycle/ SDLC processes
• Deploying Java-based/Node.JS-based Distributed Application environments.

Desired skills include:

• Experience in Installing and managing APPs on UNIX/Linux OS.
• Deep understanding of Encryption protocols used in Transport-Layer Encryption, Data Transmission and At-Rest Encryption and Key Exchange protocols
• Experience in Multi-factor authentication and Biometric deployments is a significant plus
• Familiarity with Analytical tools like Splunk, AppDynamics etc.
• Experience in Cloud technologies like OpenShift, Terraform, CI/CD Pipeline, deep understanding of micro services.
• Familiarity with IT Service Management processes based on the ITIL framework.
• Production network infrastructure such as Firewalls, DNS, Software/Hardware Load balancers, Proxies
• Familiarity of Compliance and Risk-management frameworks and methodologies (ISO27002, SDLC)

Education:

• Bachelor's Degree (Engineering, Mathematics, or IT related field) or equivalent work experience
• Security certifications such as CISSP is desired but not mandatory. However, willingness to complete certification would be expected.

The candidate should be flexible to work on weekends as required for production implementations during green zones.