Senior Cyber Security Engineer - Cloud & Multifactor Authentication

Job Description

Workplace Status:

Hybrid - This role is categorized as hybrid. This means the successful candidate is expected to report to their primary location three times per week, at minimum, or other frequency dictated by the business.

The Role:

In this role as an IAM Cloud Authentication Security Engineer, you will be responsible for the overall strategy, planning, development, execution and support of GM’s cloud Authentication and MFA solutions and their associated processes. The individual in this role will provide overall implementation and direction into Authentication, MFA and IAM functions across the organization, including areas such as mobile authentication, federation, policy creation and validation, access management, authentication and authorization, security, and provisioning identity data.

This individual will work closely with Cyber Defense, Service Desk, Network Security, Security Audit, Business leads, Application Developers and System Administrators in creating scalable and secure cloud authentication and MFA solutions and operations.

 

Job Duties:

• Identify, evaluate, and participate in decision making around new and emerging Cloud Authentication and MFA technologies, and must be able to support other areas of IAM and Information Security as needed.
• Demonstrate an advanced understanding of troubleshooting and configuring Cloud Authentication and MFA policies for applications and API integrations.
• Participate in installing, upgrading, configuring, and evaluating new MFA products including mobile and biometrics; Administer Cloud Multifactor Authentication as well as Smartcard/Biometric technologies.
• Partner with Cyber Security teams to ensure implementations meet internal policies and security standards; Create and support authentication, access policies, and single sign-on use cases relating to Windows, *nix, MacOS, and Ubuntu. Responsible for end-to-end security testing of existing and new Cloud MFA implementations.
• Provide expert level security consultation on internal projects focusing on business needs, security's role in change management, and how data is transmitted internally and externally.
• Troubleshoot and diagnose system failures in timely fashion; Must be available for on call rotations.
• Assist with creation and updates of knowledge articles, scripts, or other resources required for helpdesk and operations teams.

Additional Job Description

Minimum Qualifications:

• Bachelor’s degree in computer science or related field.
• 6+ years Identity and Access Management or Information Security experience with at least 3-5 years focused on Cloud or Multifactor Authentication solutions.
• Experience architecting Identity and Access Management (IAM), Authentication, and Multifactor Authentication (MFA) solutions in cloud environments; B2C focus strongly preferred. Experience with administration and implementation of large-scale IAM deployments in public and private cloud environments.
• Ability to effectively prioritize and execute tasks in a fast-paced environment; Ability to learn and apply new technologies quickly.
• Ability to solve complex problems and effectively communicating technical concepts to business leads.

Additional Qualifications:

• Strong understanding of Authentication and MFA constructs within Cloud environments; Extensive experience with securing, hardening, and maintaining systems using Cloud Authentication and Multifactor capabilities.
• Exposure to working in large-scale Azure B2B, Azure B2C, Azure Government Community Cloud (GCC high/Defense) and/or Azure China 21V environments preferred; Experience working in Microsoft Azure, Google Cloud and/or Amazon Web Services, Kubernetes & Open-Source Cloud Foundry.
• Access policy creation, validation and testing experience and understanding of Azure Conditional Access Policies and Single Sign-On. Technical skills, include but are not limited to SAML, OIDC, OAUTH, RADIUS, Certificate based authentication, FIDO2 keys, Smartcards, and Biometrics.
• Practical experience with SSL certificates, databases, Active Directory, application servers, operating systems, and network infrastructure; Knowledge of DevOps tools (e.g. Jenkins, Ansible, Vault, Terraform, ADO, GitHub) with CICD capabilities, including automation experience and programming languages like Java, JavaScript, Python, KQL, Powershell scripting are a must.
• Experience working with Mobile sol