Customer Authentication Engineer

Regions Bank•Hoover, AL

1d•Onsite

About The Position

At Regions, the Customer Authentication Engineer manages the day-to-day maintenance and operation of Authentication and related security systems to ensure that controls are adequate and effective in protecting the customers, environment, and employees.

Requirements

Bachelor’s degree and four (4) years of experience in Information Security/Technology
Or Associate's degree and eight (8) years of experience in Information Security/Technology
Ability to multi-task, to be self-initiated, and work independently
Excellent customer service and interpersonal skills
Good time management skills
Knowledge and skill in technical problem resolution
Strong attention to detail and outstanding analytical skills
Strong organizational, research, analytical and/or problem-solving skills to evaluate situations, make recommendations, and take effective action
Strong written and verbal communication skills
Hands-on experience engineering customer authentication flows, not just configuring IAM tools (e.g., policy‑driven, conditional, or risk‑based authentication)
Strong, implementation-level knowledge of modern identity and authentication protocols (OAuth 2.0, OpenID Connect, SAML, JWT) and their security considerations
Experience designing or supporting cloud‑native, distributed authentication services, including containerized or microservice-based architectures
Ability to design and operate vendor‑agnostic identity solutions using open standards and modular architectures
Solid understanding of customer identity lifecycle management, including registration, recovery, step‑up authentication, and account linking
Security engineering mindset, including threat modeling for authentication systems, abuse prevention, and secure token handling
Proven ability to analyze complex authentication or identity issues across application, infrastructure, and security layers
Strong written and verbal communication skills, with the ability to document architectures and explain tradeoffs to technical and non‑technical stakeholders

Nice To Haves

Experience with Agile methodology and SDLC concepts/tools (Git, Atlassian stack)
Experience with cloud-based technologies and environments such as AWS and Azure
Experience with Linux/Unix, Windows, scripting (with programming languages such as Bash, PowerShell, or Perl), SQL, LDAP, and web services
Experience with one or more programming languages such as Java, C#, C/C++, Python, or JavaScript
Ability to articulate complex technical concepts/scenarios to both technical and non-technical audiences
Familiarity with FIDO, Webauthn, OTP, Biometrics, and multifactor authentication (MFA) platforms
Financial services experience
Relevant security certifications (e.g. CISSP, CIAM, etc.)
Strong understanding of Active Directory, LDAP, RADIUS, NTLM, Kerberos, and ADFS
Strong understanding of SAML, OAUTH, OIDC, and JWT
Strong understanding of TCP/IP network security principles and troubleshooting

Responsibilities

Performs administration duties for the Identity and Authentication platforms
Develops and maintains detailed technical documentation related to the Customer Authentication and Identity platforms including on-premise and cloud-based deployments
Serves as support for architecture, support, engineering, and application development issues related to Customer Authentication and Identity
Analyzes, troubleshoots, and develops third-party integrations for related authentication and identity tools
Creates new ways to solve existing production security issues related to authentication
Evaluates new technologies and processes that enhance authentication capabilities and collaborates with management to enact change
Establishes plans and protocols to protect data and information systems against unauthorized access, modification, and/or destruction
Delivers technical reports on daily activities
Analyzes and advises on new authentication technologies and program conformance
Maintains knowledge of current and emerging technologies and advancements associated with Omni-channel and Digital Authentication and Identity offerings including Cyber Crime related activities
Analyzes security scenarios and provides data-driven solutions and recommendations to management
May offer advice and guidance to junior engineers