Senior Vice President, Identity and Authentication Engineer

BNY Mellon•Pittsburgh, PA

1d•$120,000 - $218,000•Onsite

About The Position

We’re seeking a future team member for the role of Senior Vice President, Identity and Authentication Engineer to join our Identity and Access Management team. This role is in Pittsburgh, PA or Lake Mary, FL. In this role, you’ll make an impact in the following ways: Design, implement, and support a highly available and scalable SiteMinder federation and web access management environment across enterprise platforms. Lead the configuration and maintenance of federation services using industry-standard protocols such as SAML 2.0, OAuth, and OpenID Connect, including Identity Provider (IdP) and Service Provider (SP) integrations. Design, implement, and support Azure AD / Microsoft Entra ID-based single sign-on (SSO) integrations for enterprise and cloud applications, ensuring secure and seamless access experiences. Develop and manage access control policies, realms, rules, and responses to secure critical applications, data, and enterprise resources. Partner with application, infrastructure, and security teams to deliver seamless single sign-on (SSO) integrations, troubleshoot complex authentication and authorization issues, and enhance the overall user access experience. Build and support automation solutions to streamline onboarding, configuration, deployment, monitoring, and operational support activities across the identity and access management environment.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent combination of education and practical experience.
10-12 years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.
Significant experience supporting enterprise identity and access management platforms, with strong expertise in SiteMinder administration and federation services.
Demonstrated hands-on experience with single sign-on and federation technologies, including SAML, OAuth and OpenID Connect.
Hands-on experience implementing and supporting Azure AD / Microsoft Entra ID SSO, including application integration, conditional access considerations, and federation with enterprise identity platforms.
Strong knowledge of LDAP concepts, directory structures, schema, queries, authentication flows, and integration with enterprise identity stores.
Strong development and scripting skills with experience in automation using technologies such as Python, Shell scripting, PowerShell, REST APIs, or similar tools.
Strong understanding of authentication, authorization, SSL/TLS, certificate management, and secure access controls within complex enterprise environments.
Excellent problem-solving, collaboration, and communication skills, with the ability to work effectively across cross-functional teams and support mission-critical authentication services.

Nice To Haves

experience in the securities or financial services industry is a plus.

Responsibilities

Design, implement, and support a highly available and scalable SiteMinder federation and web access management environment across enterprise platforms.
Lead the configuration and maintenance of federation services using industry-standard protocols such as SAML 2.0, OAuth, and OpenID Connect, including Identity Provider (IdP) and Service Provider (SP) integrations.
Design, implement, and support Azure AD / Microsoft Entra ID-based single sign-on (SSO) integrations for enterprise and cloud applications, ensuring secure and seamless access experiences.
Develop and manage access control policies, realms, rules, and responses to secure critical applications, data, and enterprise resources.
Partner with application, infrastructure, and security teams to deliver seamless single sign-on (SSO) integrations, troubleshoot complex authentication and authorization issues, and enhance the overall user access experience.
Build and support automation solutions to streamline onboarding, configuration, deployment, monitoring, and operational support activities across the identity and access management environment.