Sr Cyber Security Engineer (SailPoint, J2EE, Rest)

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we’ll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

Join the NBCUniversal Identity and Access Management team and help drive strategy for the growing Identity and Access Management (IAM) service portfolio. The Sr. IGA Engineer is responsible for supporting IAM in driving technology planning, application development, implementation, operations, and support for the company's digital identity and access for all enterprise workforce members.

This Sr Cyber Security Engineer role is a critical member of the NBCU IAM team responsible for the technical leadership of the Identity Governance service (IGA). You'll be responsible for designing and developing on-prem and cloud-based IGA services with the goal of reducing cyber risk where our personas, devices, and applications consume identity.  Successful candidates will couple a technical mindset with a balanced business solution approach, while applying knowledge, flexibility, and strong communication skills.

Responsibilities

• Translate complex business requirements into IAM and IGA service functionality
• Develop highly scalable identity service serving enterprise, customer access, and external partner requirements
• Produce technical solutions that meet NBCU business objectives and drive compliance with NBCU’s information security goals
• Partner with technology and security teams across NBCU to provide technical expertise, design guidance, and drive best practices
• Catalog risk embedded in legacy authorization implementations and help define a path to industry-aligned secure designs and services
• Partner in product evaluations and new technology adoptions
• Lead the execution of a comprehensive IGA enterprise-level program for the organization
• Implement, manage, lead, and document identity governance processes and tools
• Provide ongoing reporting on the program metrics to ensure the quality of the program's services is meeting business objectives
• Ensure that IGA process and workflow documentation is created and maintained
• Mentoring/advising other team members 

Qualifications

Basic Requirements:

• Bachelor of Information Security or equivalent work experience
• 5+ years’ experience designing solutions in IAM technical role(s) for large enterprise
• Significant hands-on and design experience with modern and legacy IGA services
• Experience developing Identity Lifecycle Management automation solutions
• Experience with application connection design and consulting experience on IGA functions like user life cycle management, access control policies, federation, certifications, Access management, MFA and role management
• Experience designing infrastructure, on-boarding of applications, role-based access controls, policy and password management, certifications, workflows, work items and rules
• Deep knowledge and hands on technical experience with Lifecycle Manager, Compliance Manager, Access Request, Automated Provisioning Password Management
• Understanding of RBAC, Identity Policies, Identity Lifecycle automation and reporting, Password Policies, Separation of duties, User Provisioning, and approval workflows in Saviynt, Microsoft EntraID, SailPoint IIQ and IDN
• Ability to make source code level changes and has worked in a large multinational organization providing hands-on technical architecture services with J2EE development, Database, Java, Bean Shell/JavaScr