Cyber – Identity, Cloud, and Application Security

Job Description

The Engineer is responsible for the design, implementation, and ongoing administration of the Bank’s identity-centric security controls across cloud, application, and enterprise environments. This role focuses on strengthening identity, authentication, and privileged access controls as foundational components of the Bank’s cybersecurity strategy.

Working closely with Cyber Defense, Infrastructure, and Application teams, this position supports the development and maturation of Identity and Access Management (IAM), Privileged Access Management (PAM), and cloud security capabilities. The role ensures that access to systems, applications, and sensitive data is appropriately governed, monitored, and protected in alignment with regulatory expectations and industry best practices.

RESPONSIBILITIES:

• Design, implement, and maintain identity and access security controls across enterprise systems, cloud platforms, and applications, including authentication, authorization, and access provisioning.
• Support and enhance IAM and PAM solutions, including Entra ID (Azure AD), Active Directory, SailPoint, Delinea Secret Server, and related identity security platforms.
• Administer and monitor cloud and identity security tools such as Microsoft Defender for Identity, Defender for Cloud, and Defender for Cloud Apps to strengthen preventive and detective controls.
• Manage and secure non-human identities, service accounts, certificates, and machine identities, including PKI and certificate lifecycle processes.
• Partner with cross-functional teams to integrate secure authentication (SSO, MFA, Conditional Access) into applications and cloud services, ensuring consistent and secure access models.
• Contribute to identity governance activities, including access reviews, role design, and enforcement of least privilege principles to align with regulatory and audit requirements.
• Identify control gaps, analyze identity-related risks, and implement remediation strategies to improve the Bank’s overall security posture.
• Support ongoing projects and operational activities related to cloud security, application integration, and identity modernization initiatives.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field required (or equivalent experience).
• Minimum of 5–8 years of experience in cybersecurity, identity and access management, or cloud security roles, preferably within a financial institution or regulated environment.
• Strong knowledge of IAM concepts, including SSO, MFA, federation, RBAC/ABAC, and identity governance processes.
• Experience with Microsoft Entra ID (Azure AD), Active Directory, and cloud identity integrations.
• Hands-on experience with IAM/PAM tools such as SailPoint, CyberArk, Delinea, Okta, or similar platforms.
• Familiarity with cloud security principles and tools, particularly within Microsoft Azure environments.
• Understanding of regulatory and security frameworks (e.g., FFIEC, NIST, CIS benchmarks) and their application to identity and access controls.
• Experience analyzing security data and logs to identify anomalies, threats, and control weaknesses.
• Strong problem-solving, analytical, and communication skills with the ability to translate complex technical concepts into business-relevant insights.
• Relevant certifications (e.g., CISSP, CISM, Azure Security Engineer, or IAM-related certifications) preferred.

KEY COMPETENCIES:

• Identity & Access Security Expertise
• Analytical Thinking & Problem Solving
• Risk & Control Awareness
• Cross-Functional Leadership