Sr. Cybersecurity Engineer, Active Directory & Azure Access Management
Sr. Cybersecurity Engineer, Active Directory & Azure Access Management
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
The Identity and Access Management (IAM) team is responsible for securing employee access to our core applications in the most efficient compliant and userfriendly manner innovatively using the latest industry standards and tools. Our goal is to become the gold standard for IAM worldwide and we are already on our way recently winning Oracles annual Identity Management Innovation award.
Visas IAM ecosystem includes an extensive and highly customized rich Identity Management platform implementation. The team has successfully implemented many of the core components. With a constant moving and expending environment the IAM team is exploring all processes and technology to expend the security coverage and improve the end user experience. With the additional features and the goal of extensive coverage comes a higher level of complexity criticality overall usage and dependency on the environment.
Join a growing fastpaced and highperformance Access Controls team. The ideal candidate for position will be a proactive and selfmotivated professional who will work with other team members to manage access controls for Visa key information resources residing on multiple platforms with a focus area in Active Directory EntraID Windows Servers and automation. The successful candidate will aid in the continuous improvement of the identity and access management practices looking for opportunities to automate where possible.
Essential Functions
Provide Subject Matter Expertise (SME) over IAM practices policies and procedures for Active Directory Windows Systems and Cloud Platforms.
Implement and enforce Identity and Access Management policies in Active Directory ensuring access approvals rogue access monitoring Credential strengthening and security (including passwords and keytabs) Credential reuse monitoring as well as support for full lifecycle of identities and access.
Govern access controls for Cloud platforms in particular Microsoft EntraID including PIM Azure Key Vault federated SSO groups Managed IDs and SPNs across entire hierarchy.
Collaborate with crossfunctional teams and key stakeholders including Senior Cybersecurity Management IT Architecture and Acquired Entities to ensure seamless integration and alignment with Security best practices.
Lead and participate in projectbased activities for Access Management contributing business requirements design reviews architecture planning whilst ensuring adherence to both industry and company security standards.
Proactively identify audit and compliance access related issues to reduce the risk of security exposures on the support systems and applications. Coordinate access management related audit and compliance tasks such as user access reporting and other relevant research and investigation.
Identify and analyze opportunities to streamline and automate existing manual processes specifically within access management practices with the aim of driving operational efficiency.
Liaise with Auditors and Regulators to present compliance and control evidence as well as conduct regular audits and assessments to identify and mitigate risks.
Provide expertise in incident response and remediation for identityrelated security incidents.
Utilizing both SIEM and CIEM tools to enhance security monitoring incident response and identity management within hybrid cloud environments.
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.
Qualifications :
Basic Qualification:
5 years of relevant work experience with a Bachelors Degree or at least 2
years of work experience with an Advanced degree (e.g. Masters MBA JD
MD) or 0 years of work experience with a PhD OR 8 years of relevant work
experience.
Preferred Qualifications:
6 or more years of work experience with a Bachelors Degree or 4 or more years
of relevant experience with an Advanced Degree (e.g. Masters MBA JD MD)
or up to 3 years of relevant experience with a PhD
Over 6 years of handson experience in Cybersecurity with a strong focus on
Identity and Access Management (IAM) including extensive experience with
Active Directory management Security Groups User Objects GMSAs Service
Account Management and Keytabs.
3 years of proven experience in managing and securing Azure environments
through Privileged Identity Management (PIM) AD Federations Azure Key
Vault and federated Single SignOn (SSO) solutions.
Demonstrated experience in leading and participating in projectbased
activities related to access management including contributing to business
requirements design reviews and architecture planning
Certification in IAM or cybersecurity such as CISSP CISM CISA or Microsoft
Certified: Identity and Access Administrator Associate.
Cloud platform Identity and Access Management experience with AWS and/or
GCP
Expertise in automating IAM Processes using Generative AI and scripting
languages such as PowerShell or Python to improve operational efficiency.
Understanding and experience with regulatory frameworks (e.g. SOX PCI DSS)
related to identity and access management.
Experience with SIEM and CIEM tools for security monitoring incident
response and cloud identity management.
Additional Information :
Work Hours: Varies upon the needs of the department.
Travel Requirements: This position requires travel 510% of the time.
Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk communicate in person and by telephone frequently operate standard office equipment such as telephones and computers.
Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.
Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law including the requirements of Article 49 of the San Francisco Police Code.
U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is 139800.00 to 202750.00 USD per year which may include potential sales incentive payments (if applicable). Salary may vary depending on jobrelated factors which may include knowledge skills experience and location. In addition this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical Dental Vision 401 (k) FSA/HSA Life Insurance Paid Time Off and Wellness Program.
Remote Work :
No
Employment Type :
Fulltime
Employment Type
Full-time
