Single Sign-On (Sso) Architecture-Network Engineering Advisor

NTT DATA Services strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
Role Title

Authentication Platforms - Infrastructure Support Engineer (L3)
Job Description

Authentication Platforms Infrastructure team is responsible for providing support services to all Citi businesses and technology teams globally. The Information Security role is part of a larger global team responsible for providing Infra support for multiple Platform based application solutions to all businesses across Citi.
TheInfrastructureSupport Engineer (L3) role will be responsible for the support of multiple critical security infrastructures / applications including but not limited to Token technologies, End-to-end encryption Solutions, Identity and Access management tools and Automation infrastructuresto name a few.
Ideal candidate should be able to work in a well-defined team structure as well as independently with minimal supervision. Candidate should have a good command of English and possess strong oral and written business communication skills. Candidate should be a fast-learner and should be able to work well under pressure and competing priorities.

Key Responsibilities
Deploy and manage day-to-day operations of critical security infrastructure.

Function as an Infrastructure Subject Matter Expert (SME) for the security infrastructure under your responsibility
Ensure compliance of all the supported applications with Citi-published standards
Perform post-deployment testing of solutions in individual environments.
Engage with strategic vendors, external to the organization, to investigate problems and understand product functionality, influence enhancements and roadmap as required to meet organizational goals.
Support internal and external customers in the adoption of the Authentication services.
Collaborate with L2 teams to assist in integration-related activities.
Troubleshooting incidents and problems in a timely resolution as defined in SLAs.
Document resolutions in Knowledge Base tools
Capacity, Performance and Stability reporting and management
Lead initiatives to develop/enhance tools for system monitoring and maintenance improvements

Weekend work and working on shifts on a rotation basis is expected.

Experience and Skills

Must-have Skills
At least 8 years of IT industry experience with
5+ years working in a Linux-based environment (RHEL, Ubuntu) that includes being conversant in terminal commands, developing shell scripts and setting up schedulers (Cron, Autosys)
3+ years' experience in Authentication technologies such as Single Sign-On (SSO), Kerberos, Identity Federation with hands on experience on one or more of the following products:SSO (Ping Access/Fed, CA SiteMinder, RSA Access Manager, ForgeRock, Okta etc.,)
Directory Servers (Ping Directory, CA Directory Server, Radiant Logic Virtual directory)

Experience with critical production server support, application upgrades and project lifecycle/ SDLC processes

Desired Skills

Sound understanding of one or more of the following:Authentication protocols such as OAuth, OpenID Connect, SAML 2.0, WS-Security, FIDO2
Encryption protocols used in Transport-Layer Encryption, Data Transmission and At-Rest Encryption and Key Exchange protocols.
Production network infrastructure such as Firewalls, DNS, Software/Hardware Load balancers, Proxies
Analytical/Monitoring tools such as Grafana, Sensu, Splunk, App Dynamics etc.

Experience with one or more of Enterprise application servers such as IBM WebSphere/WebLogic, Apache Tomcat/HTTP Server
Familiarity with IT Service Management processes based on the ITIL framework.

Education
Bachelor's Degree (Engineering, Mathematics, or IT related field) or equivalent work experience

Role Title

Authentication Platforms - Infrastructure Support Engineer (L3)
Job Description

Authentication Platforms Infrastructure team is responsible for providing support services to all Citi businesses and technology teams globally. The Information Security role is part of a larger global team responsible for providing Infra support for multiple Platform based application solutions to all businesses across Citi.
The Infrastructure Support Engineer (L3) role will be responsible for the support of multiple critical security infrastructures / applications including but not limited to Token technologies, End-to-end encryption Solutions, Identity and Access management tools and Automation infrastructures to name a few.
Ideal candidate should be able to work in a well-defined team structure as well as independently with minimal supervision. Candidate should have a good command of English and possess strong oral and written business communication skills. Candidate should be a fast-learner and should be able to work well under pressure and competing priorities.

Key Responsibilities
Deploy and manage day-to-day operations of critical security infrastructure.

Function as an Infrastructure Subject Matter Expert (SME) for the security infrastructure under your responsibility
Ensure compliance of all the supported applications with Citi-published standards
Perform post-deployment testing of solutions in individual environments.
Engage with strategic vendors, external to the organization, to investigate problems and understand product functionality, influence enhancements and roadmap as required to meet organizational goals.
Support internal and external customers in the adoption of the Authentication services.
Collaborate with L2 teams to assist in integration-related activities.
Troubleshooting incidents and problems in a timely resolution as defined in SLAs.
Document resolutions in Knowledge Base tools
Capacity, Performance and Stability reporting and management
Lead initiatives to develop/enhance tools for system monitoring and maintenance improvements

Weekend work and working on shifts on a rotation basis is expected.

Experience and Skills

Must-have Skills
At least 8 years of IT industry experience with
5+ years working in a Linux-based environment (RHEL, Ubuntu) that includes being conversant in terminal commands, developing shell scripts and setting up schedulers (Cron, Autosys)
3+ years' experience in Authentication technologies such as Single Sign-On (SSO), Kerberos, Identity Federation with hands on experience on one or more of the following products:SSO (Ping Access/Fed, CA SiteMinder, RSA Access Manager, ForgeRock, Okta etc.,)
Directory Servers (Ping Directory, CA Directory Server, Radiant Logic Virtual directory)

Experience with critical production server support, application upgrades and project lifecycle/ SDLC processes

Desired Skills

Sound understanding of one or more of the following:Authentication protocols such as OAuth, OpenID Connect, SAML 2.0, WS-Security, FIDO2
Encryption protocols used in Transport-Layer Encryption, Data Transmission and At-Rest Encryption and Key Exchange protocols.
Production network infrastructure such as Firewalls, DNS, Software/Hardware Load balancers, Proxies
Analytical/Monitoring tools such as Grafana, Sensu, Splunk, App Dynamics etc.

Experience with one or more of Enterprise application servers such as IBM WebSphere/WebLogic, Apache Tomcat/HTTP Server
Familiarity with IT Service Management processes based on the ITIL framework.

Education
Bachelor's Degree (Engineering, Mathematics, or IT related field) or equivalent work experience

#LI-MIWS

NTT DATA Services strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.