Lead, Infrastructure Security Engineer - Active Directory and ADFS

Prudential Financial • Newark, NJ

2d • Onsite

About The Position

As a Lead, Infrastructure Security Engineer in the Workforce Identity Management team, you will partner with product owners, tech leads, engineers, and security stakeholders to improve Prudential’s identity and access management platform. An important function of this role is to ensure the identity platform remains in compliance with the Information Security Standards and processes. You will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude, and a continuous learning focus to all that you do.

Requirements

• Bachelor of Computer Science or related experience in identity security related field
• Security identity architectures and frameworks, privileged access management
• Audit and compliance engagements and ability to field and tend to PCI/SOX/Fed regulatory requirements as well as remedial action plans
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills
• On-Premises Microsoft Identity platform Active Directory Domain Services (AD DS): Troubleshooting, Management, Health and Performance, Trust Relationships, Security Controls, Group Policy Object (GPO) Creation and Management, Replication and topology, DNS, Certificate management
• Active Directory Federation Services (ADFS): Troubleshooting, Management, Claims Rules, Relying Party Trusts, Web Application Proxy (WAP)
• Authentication protocols: LDAP, Kerberos
• Single Sign-On (SSO) protocols: SAML, WS-Federation
• Server Administration: Windows Server operating system
• Programming Languages: PowerShell scripting and automation
• Cloud Computing: Understanding and knowledge Microsoft Azure and Entra ID
• 10+ Years focused on IAM technology and 6+ Years in information technology/Cybersecurity.
• 10+ Years of Active Directory (AD) and AD FS Server Maintenance and Management
• Bachelor’s degree in computer science field or equivalent experience
• Experience with after hours on-call rotation

Nice To Haves

• Hyper-V, Microsoft System Center Platform (SCCM, SCVMM, SCOM, SCORH), Splunk, Service Now
• Jira, Jira Align, ability to plan in Agile Format
• Ability to write clear documentation using Confluence

Responsibilities

• Review and understand all applicable Information Security Standards and Engineering Specifications; create an action plan to remediate out of compliance issues
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products
• Collaborate with our Information Security Office regularly to complete security hardening on identity management platforms
• Collaborate with other engineering teams to maintain a secure and highly available environment
• Coordinate the scheduling of patches and upgrades on identity management platform systems as well as ensure accurate operational information in CMDB
• Provide technical support to stakeholders and business applications teams
• Bring a strong understanding of relevant and emerging technologies, provide input and assist fellow team members
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.

Benefits

• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave
• 401(k) plan with company match (up to 4%)
• Company-funded pension plan
• Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs
• Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development
• Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs
• Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service
• Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior