ABOUT THE TEAM

The IAM Cloud Enablement Team within Identity and Access Management in Core Engineering focuses on providing cloud platform services that enable 1) Digital identity lifecycle management for client and service identities, 2) Secure and policy driven access to cloud hosted business applications, APIs and data for internal and external clients of the firm, and 3) Launch of an unified identity and authentication service that simplifies authentication and access to the firm’s client-facing apps, enhances security, and reduces operational and infrastructure costs for the firm.

HOW YOU WILL FULFILL YOUR POTENTIAL

• Document, design, and test cloud native service-oriented enterprise software to deliver critical business functions related to the lifecycle management of firm’s client and service identities. 
• Participate in definition of requirements and help with deployment and support.
• Ensure that all platforms are built in accordance with the firm’s SDLC recommendations such as Git, Maven, and in accordance with industry-standard practices such as RESTful web services.
• Design, evaluate, and recommend tools and technologies that the team should be using to help solve business problems. 
• Document testing strategies, plan and run the User Acceptance Testing (UAT) phase to engage all essential stakeholders and acquire business approvals. 
• Discuss changes to software that has already been deployed to enhance capabilities based on feedback obtained from business users.
• Guide new users to adopt the cloud platform seamlessly and demise legacy on-premise software.

SKILLS AND EXPERIENCE WE ARE LOOKING FOR

• Designing and managing applications or processes on Amazon Web Services (AWS), leveraging understanding of core AWS services and basic AWS architecture best practices.
• Using SQL to analyze database queries and store procedures.
• Utilizing shell scripting or Python to analyze and maintain server side scripts.
• Working across requirements, design and maintenance of distributed applications in Java.
• Supporting production environments to analyze and provide enhancements and break fixes as required.
• Experience creating resilient, low latency and robust services through a combination of high availability infrastructure and transaction management.
• Ability to troubleshoot and diagnose performance, security, and process interactions in complex distributed systems
• Ability to understand and effectively debug both new and existing software.

PREFERRED QUALIFICATIONS

• 3+ years of experience designing and developing distributed applications in a collaborative global team
• Understanding of security concepts, including authentication, authorization, encryption, cryptographic algorithms, public key infrastructure, and secure coding practices
• Familiarity with products such as Kerberos, PingFederate, Okta
• Understanding of some or all the following concepts: OAuth 2.0, SAML 2.0, Open ID Connect, IAM (Identity and Access Management), Web Application Security, API gateways, REST APIs, Security Logging, PKI
• Strong analytical, reporting and presentation skills