Cyber Security Engineer - Identity & Access Management C13 - VP

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect. This is an opportunity to work with Global Secrets Management Platforms team which is part of Citi’s Cyber Security Services. This team is responsible for secrets management on-prem and the cloud for applications across the firm.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Job Description:

We are opening our doors for talented individuals who are forward thinking and passionate about Cyber Security and its global implications and to put their skills to the test by implementing and driving cutting edge technologies within a highly secure operating environment.

If you have a strong background in NIX & Wintel technologies and consider yourself a technology leader with excellent communication skills, have a wide variety of skillset including a firm grasp of operating systems, hands on scripting/programming, networking protocol implementation and various virtualization technologies, then Citi is a place for you to be, as we offer the environment where skills like these can thrive.

Candidate will be overseeing the infrastructure projects, security assessment, transition of Infrastructure and tools under global operating model, handle day to day production issues, carry out root cause analysis/resolution for system issues, defects, and minor enhancements, supporting project transition within the Cyber Security & Networks department.

Responsibilities:

• Provide Technical Application SME support for the Security Infrastructure and Applications.
• Production and UAT Environment setup.
• Capacity, Performance and Stability reporting and Management.
• Lead initiative to develop/improve scripts and other programs for system monitoring and maintenance.
• Provide Technical Mentoring.
• Lead Infrastructure projects and Security assessment for the infrastructure associated the applications in scope.
• Leadership Skills to Document and do knowledge transfer to other team members.
• Be responsible to assess the risk and associated impact of all operational issues and change events and react quickly to escalate to technology management in a timely manner when required.
• Work closely with the development team to ensure the operational requirements are met during the project transition
• Continuously keep the Knowledge Share repository up to date.
• Strong interpersonal and communication skills.  
• Strong analytical skills and attention to detail.
• Ability to work across all levels of the organization.
• Proven ability to work with demanding global partners within aggressive timelines; solid problem solving, analytical and technical abilities.

Qualifications:

• 6 + years of relevant experience
• Fluently communicates in both written and oral English
• Is security conscious and has experience deploying security related updates to application and has deep understanding of server level patching mechanism
• Must have exceptional analytical skills
• Must have experience following and developing procedures for operational support along with good documentation skills using well known tools & web applications
• Excellent organizational, interpersonal, and project management skills
• Ability to work well individually and as part of a team
• Certification or Extensive experience with either C#, .Net, Java, Perl, Python, Shell Scripting or any well-known / open source programming languages
• SRE/DevSecOps Foundation Certification
• CyberArk Sentry, Thycotic CSSS, BeyondTrust PSA Certification would be good but not required
• Hands on experience with web services and associated frameworks like SOAP & REST API.
• Operating System certifications like MCSA (Windows Server), RHCSA, RHCE, CompTIA Server+
• Knowledge of Security tools and hands-on experience with some of the following technologies is an added advantage:
  • Workload Automation & Job execution tools
  • Experience with documenting within web based collaboration tools
  • Experience working and implementing tools that monitoring infrastructure server utilization and services
  • Security Infrastructure technologies such as AAA, Token Technologies, Access Management, Unix Security tools, Directory Servers.
  • Databases including RDBMS & NoSQL
• Familiarity of Compliance and risk management frameworks and methodologies (ISO27002, SDLC/TDLC).
• Deploy and design large scale complex security ecosystems
• Proficiency in one or more of these scripting languages – Python, Unix Shell, Perl & PowerShell scripting.
• Good grasp of networking concepts and protocols
• DevOps/SRE with integration and Infrastructure Build experience including AWS, Google Cloud or Azure
• Hands-on experience working with various flavors of server operating system, NIX or Windows based
• Deep understanding of TCP/IP technologies and internet routing protocols
• Inner workings of Web/Application services from a programmer or application integrators perspective
• Experience with RDBMS from application programmer’s perspective. Good knowledge of how to interface with these databases, analyze & write complex queries & procedures
• Hands on experience with production infrastructure support, application upgrades and project life cycle/TDLC process.
• Integration of server performance and capacity monitoring tools with various products.
• Working knowledge of open source automation and resource/system monitoring technologies

Education:

• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

-------------------------------------------------

Job Family Group:

Technology

-------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting