Lead Authentication Engineer – Vice President – Cybersecurity Engineering

About the role

We are looking for a senior professional to join our Identity Access Management team and lead the authentication modernization roadmap within the Cyber Data Risk & Resilience division. The role will design, integrate, implement, and operationalize enterprise authentication solutions across the workforce identity ecosystem.

Key responsibilities

• Lead hands‑on authentication engineering: design, build, integrate, and ship secure, scalable solutions for human and non‑human identities.
• Own enterprise authentication & federation: implement and harden OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (mTLS, certificate lifecycle), API authentication, and Unix/Linux authentication.
• Integrate and customize IAM platforms: deliver end‑to‑end integrations across Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, HSMs, IDM/LDAP, and RCBI in cloud and hybrid environments.
• Drive reliability and automation at scale: operate large‑scale IAM estates with HA/DR, performance tuning, IaC (Terraform), configuration management (Ansible/Puppet/Chef), CI/CD, observability, and safe deployment strategies.
• Partner and operate across teams: collaborate with product and platform leads, participate in on‑call rotations, lead root‑cause analyses, and promote operational excellence.
• Translate architecture into executable work: break down designs into epics, stories, runbooks, pipelines, ADRs, standards, and audit‑ready documentation.

Required profile

• 12+ years of experience in cybersecurity engineering with a hands‑on, principal‑engineer mindset.
• Deep expertise in authentication protocols such as OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, and PKI at enterprise scale.
• Proven mastery of IAM platforms and integrations including HashiCorp Vault, CyberArk, SailPoint, Entra ID, Ping Identity, IDM/LDAP, and related technologies.
• Extensive experience operating IAM services in globally distributed, multi‑region environments with HA/DR, performance tuning, IaC, and observability.
• Strong security and compliance knowledge: threat modeling, least‑privilege, PAM, secrets management, policy‑as‑code, and auditability for both human and non‑human identities.
• Systems‑integration mindset with the ability to customize vendor products and open standards into cohesive, well‑documented solutions.

Required skills

• OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (mTLS, certificate lifecycle)
• API authentication (JWT, mTLS) and Unix/Linux authentication
• Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, HSMs, IDM/LDAP, RCBI
• Infrastructure as Code (Terraform)
• Configuration management (Ansible, Puppet, Chef)
• CI/CD pipelines and observability tooling
• Shell scripting, Python, Go