Senior Cyber Security Engineer

Summary

Join the NBCUniversal Identity and Access Management team as a Sr. IGA Engineer and contribute to the strategy and development of the IAM service portfolio. This critical role involves technical leadership of Identity Governance services, designing and developing on-prem and cloud-based solutions to reduce cyber risk. You will translate business requirements into IAM functionality, develop scalable identity services, and partner with various teams to ensure compliance and best practices. The position requires significant experience in IAM, IGA, and related technologies, along with strong communication and leadership skills. NBCUniversal offers a comprehensive benefits package, including medical, dental, vision, 401k, paid leave, and tuition reimbursement.

Requirements

• Bachelor of Information Security or equivalent work experience
• 5+ years’ experience designing solutions in IAM technical role(s) for large enterprise
• Significant hands-on and design experience with modern and legacy IGA services
• Experience developing Identity Lifecycle Management automation solutions
• Experience with application connection design and consulting experience on IGA functions like user life cycle management, access control policies, federation, certifications, Access management, MFA and role management
• Experience designing infrastructure, on-boarding of applications, role-based access controls, policy and password management, certifications, workflows, work items and rules
• Deep knowledge and hands on technical experience with Lifecycle Manager, Compliance Manager, Access Request, Automated Provisioning Password Management
• Understanding of RBAC, Identity Policies, Identity Lifecycle automation and reporting, Password Policies, Separation of duties, User Provisioning, and approval workflows in Saviynt, Microsoft EntraID, SailPoint IIQ and IDN
• Ability to make source code level changes and has worked in a large multinational organization providing hands-on technical architecture services with J2EE development, Database, Java, Bean Shell/JavaScript, JSP/Servlets, SQL
• Experience with Rest Web services, SAML 2.0, JDKs, OAuth, WS-Security, etc
• Experience with enterprise directory services, including significant knowledge of Active Directory and Entra ID
• Exceptional communication and interpersonal skills; including negotiation, facilitation, and consensus building skills; ability to influence, persuade, and manage polarities without direct control
• Ability to balance the long-term big picture and short-term implications of tactical decisions
• Possesses an innovative technical mindset with a focus on architecture, strategy, and design
• Strong desire to drive change

Responsibilities

• Translate complex business requirements into IAM and IGA service functionality
• Develop highly scalable identity service serving enterprise, customer access, and external partner requirements
• Produce technical solutions that meet NBCU business objectives and drive compliance with NBCU’s information security goals
• Partner with technology and security teams across NBCU to provide technical expertise, design guidance, and drive best practices
• Catalog risk embedded in legacy authorization implementations and help define a path to industry-aligned secure designs and services
• Partner in product evaluations and new technology adoptions
• Lead the execution of a comprehensive IGA enterprise-level program for the organization
• Implement, manage, lead, and document identity governance processes and tools
• Provide ongoing reporting on the program metrics to ensure the quality of the program's services is meeting business objectives
• Ensure that IGA process and workflow documentation is created and maintained
• Mentoring/advising other team members

Preferred Qualifications

• Excellent Communications Skills
• Experience building and delivering large-scale Enterprise SailPoint service instances
• Experience developing and delivering Zero Trust designs

Benefits

• Medical, dental and vision insurance
• 401(k)
• Paid leave
• Tuition reimbursement
• A variety of other discounts and perks
• Fully Remote