IT Security Engineer, AVP

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary:

We are looking for an experienced MFA Engineer with expertise in RSA SecureID to join our team.

In this role, you will be responsible for the administration, deployment and support RSA-based multi-factor authentication solutions.

You will ensure secure access to critical systems by maintaining and integration RSA with variety of platforms and applications, supporting token management systems and end-user authentication experiences.

Responsibilities:

• Manage Trusted Realms and user authentication across realms
• Develop/manage Authentication Policies including Token policies, Lockout policies, and Password policies
• Manage Security Domains/Mapping
• Cleanup Unresolvable Users and User Groups through scheduled jobs and manual methods
• Token Records Synchronization Between Authentication Manager and Cloud Authentication Service
• Manage Administrative Roles & Accounts
• Experience with Patching, configuration, and upkeep of RSA Authentication Manager
• Service Maintenance including Monitoring & Reporting

Qualifications:

• Minimum 2 to 3 years’ experience

• Background in Identity and Access Management (IAM) and Authentication Manager Integration Services (AMIS) is a huge plus.

• Deploying authentication agents, configuring authentication policies, deploying, and administering RSA SecurID tokens
• Experience with RSA SecurID Authentication API, including REST API, for Authentication Agents
• Experience with RSA AMIS including SSP and HDAP
• Two-factor / On-demand authentication to various systems
• Experience configuring internal and external (LDAP / Active Directory) Identity Sources
• Experience with the Linux OS

Education

Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience

The typical base pay range for this role is between $110K - $142K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.

MUFG Benefits Summary

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the materi