Cyber Security Engineer

mthree•Alpharetta, GA

About The Position

Join the Customer Authentication team in CDRR as a Cyber Security Engineer working on authentication for ETRADE’s more than ten million customers. The team is modernizing authentication factors and infrastructure, including support for Time-Based One-Time Passwords (TOTP), mobile push, and YubiKeys, with the goal of strengthening customer security while reducing login friction. It also develops standards-based identity and access management services and APIs to help development teams create secure, dynamic, and seamless customer interactions. The role involves designing, developing, and maintaining secure, scalable, and resilient authentication solutions for a multitier application, using Ping Access Manager, Java, Spring Boot, APIs, and related technologies. The engineer will contribute to authentication and authorization capabilities, own technical solutions from requirements through production support, lead development initiatives, collaborate across teams, improve testing and engineering practices, troubleshoot production issues, and mentor developers. mthree is a technology and business consultancy that delivers business and IT projects for financial services organizations and other global clients. Its areas of work include risk, regulation and compliance, vendor products, application support and development, cyber and information security, data science, and DevOps. The position has a starting base pay rate of $105,000 USD. Applicants must already be authorized to work full-time in the United States; the company will not sponsor work visas.

Requirements

3–7 years of relevant work experience.
Ability to process information, translate it into plans, and present summaries to stakeholders.
Experienced understanding of the business line and discipline.
Strong hands-on experience with Java, Spring Boot, JavaScript, object-oriented programming, and software design principles.
Strong hands-on knowledge of Ping Access Manager and its core capabilities and modules.
Thorough understanding of authentication, authorization, and federation technologies, including OAuth, OpenID Connect, SAML, and LDAP.
Experience designing and implementing complex test scenarios, including unit and integration testing.
Proven experience leading development initiatives and mentoring engineers.
Strong analytical and problem-solving skills, including the ability to troubleshoot complex technical issues.
Ability to translate complex information into actionable plans and communicate effectively with technical teams and stakeholders.
Strong collaboration and communication skills in a cross-functional engineering environment.
Applicants must be currently authorized to work in the United States on a full-time basis; the company will not sponsor work visas.

Nice To Haves

Familiarity with CI/CD practices and tools such as Jenkins.

Responsibilities

Design, develop, and maintain secure, scalable, and resilient authentication solutions for a multitier application using Ping Access Manager, Java, Spring Boot, APIs, and related technologies.
Develop authentication and authorization capabilities using OAuth, OpenID Connect, SAML, LDAP, and related standards.
Own complex technical solutions end-to-end, from requirements and design through implementation, testing, production readiness, and support.
Collaborate with developers, architects, product owners, QA, and partner teams to evaluate technical options and deliver effective solutions.
Create and implement testing strategies and plans, including unit and integration tests for Access Manager code and functionality.
Provide hands-on technical expertise for complex development initiatives and drive resolution of technical and cross-team dependencies.
Promote engineering best practices in coding standards, code reviews, automated testing, reusable solutions, and maintainability.
Troubleshoot complex application and production issues, perform root-cause analysis, and implement sustainable solutions.
Identify opportunities to improve security, performance, resiliency, and developer experience.
Mentor developers through technical guidance, design discussions, code reviews, and knowledge sharing.
Stay current with Ping/ForgeRock capabilities and evolving authentication technologies to support platform modernization.