Senior Authentication Engineer

Senior Authentication Engineer

Do you want to work for a tech company that writes its own code, develops its own software, and builds its own products? We experiment and innovate leveraging the latest technologies, engineer breakthrough customer experiences, and bring simplicity and humanity to banking. We make a difference for 65 million customers.

 

At Capital One, you'll be part of a group of makers, breakers, doers, and disruptors, who love to solve real problems and meet real customer needs. Do you possess an innate desire to learn and work on new and exciting technology and design solutions as it relates to identity and directory services today and into the future? If so, then this opportunity might be for you.

Responsibilities

• Analyze, enhance, and support the security posture of a highly complex, enterprise level Authentication services environment in a hybrid on-premise and cloud hosted configuration. Includes Directory, SSO, Identity Verification, and MFA registration management

• Ability to automate day to day tasks, provide dashboarding and operational awareness capabilities, enhance resiliency

• Manage enterprise cloud infrastructures in AWS

• Translate business needs into workable technology solutions that meet the needs of internal customers

• Participate in or lead troubleshooting and incident resolution of complex, high severity incidents

• Develop automated solutions using scripts, pipelines, and cloud based server-less computing platforms

• Develop detailed architecture, standards, design, and implementation documentation

• Analyze the current Authentication Services environment to identify both technical and operational opportunities and develop continuous improvement action plans
   

Basic Qualifications

• High School Diploma, GED or equivalent certification

• At least 3 years of experience working in cyber security or information technology

• At least 1 year of experience with Active Directory, AWS, PingFed, or PingID

• At least 1 year of experience with Cloud Infrastructure management

Preferred Qualifications

• Bachelor’s Degree

• 5+ years of experience with securing and managing Active Directory at an enterprise level

• 5+ years of experience with EC2, CFT, and AWS cloud infrastructures

• 5+ years of experience in Active Directory security

• 5+ years of experience developing complex scripts in PowerShell, VBScript, YAML, Python or other languages to develop automated solutions
   

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $158,600 - $181,000 for Prin Assoc, Cyber Technical

 

Plano, TX: $144,200 - $164,600 for Prin Assoc, Cyber Technical

 

Richmond, VA: $144,200 - $164,600 for Prin Assoc, Cyber Technical

 

 

 

 

 

 

 

 

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management leve