Sr Identity Access Management Engineer

Purpose of the role

Yum! Brands Cybersecurity Division is looking for a dynamic candidate to provide Identity and Access Management leadership for our global business enterprise to provide access to digital assets, while mitigating risk to a business acceptable level. We are a company that thrives on innovation, so to be successful youll have a great degree of curiosity, as well as deep knowledge of Identity and Access Management systems (primary ISAM and ISIM), Single-Sign-On, Web Services, and Authentication Protocols (SAML, OAuth, OpenID).

This role provides significant visibility; not only will you work closely with the corporate IT team, but you will also interact with the Security Architects, the Yum Senior Leadership Team; Global IT Directors and Managers; Yum Infrastructure Leaders, Yum Legal, and various vendors and service providers.

Role & responsibilities

Youll lead a team of 3+ engineers, and act as a mentor to experienced team members, so prior leadership experience is crucial. You are someone who can operate with minimal supervision in a complex environment and has the ability to support global IAM operations to the business. Additional responsibilities include:

• Developing strategic plans for securing Yums global business operations including new technology research/development/implementation
• Creating global IAM policies and standards, and updating the rolling 3-year global IAM operation roadmap
• Working with cross functional teams to ensure the confidentiality, integrity, and availability of Yum’s digital assets and systems
• Oversee IAM operations, incidence investigation, problem resolution and technical consultation. Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.
• Develop operation specifications for new IAM services, applications and service offerings
• Work with IAM architecture (integrated process, applications, data and technology) team to solve business problems in alignment with the current standards
• Work with IAM architecture and development Team to build enterprise-wide custom integration solutions w/ applications, services and processes that drive business results ensuring all Yum Security Standards.
• Participate in cross functional project planning activities to ensure project success and security and recovery of critical systems.
• Lead research of Identity and Access Management (IAM) Systems, Single-Sign-On and Authentication Technologies which lead to higher productivity and easier secure access to Yum’s global digital assets. Assets include information, desktops, servers, web services, applications, contracts and mobile devices.
• Develop a global 1-3 year road map for Identity and Access Management for in-store, above store, and consumer facing technologies.
• Ensure development of secure application and authentication standards to enable Yum’s digital growth initiatives in both web based and mobile platforms.
• Research and evaluate new security solutions, including lab tests, proof of concepts and pilots. Make operational and technology recommendations which influence Yum’s global operations.
• Provide leadership to brand and Cybersecurity division- IAM

Preferred candidate profile

Minimum Requirements:

EDUCATION:

BE/B Tech degree, graduate degree a plus, Certified Information Systems Security Professional (CISSP) a plus.

EXPERIENCE (and other qualifications):

• IAM Subject Matter Expertise with at least 12+ years on operations, implementation and development experience integrating security solution w/ business application and processes.
• Minimum of 5 years leading technical teams with responsibility for Global IAM operations
• A deep understanding of Identity and Access Management Architecture and Operations is required.
• Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.
• Knowledge of Web Services Architecture required.
• Knowledge of SSO and Federation required.
• Knowledge of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.
• Detailed familiarity with ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development
• Detailed familiarity with ISAM and Ping Federation Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access
• A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.
• Strong knowledge of Internet technologies and XML integration, including XML-Schema, XML-RPC, XML-SOAP, and/or Web Services/SOA
• Detailed familiarity with JSP/Servlets, SPML, DAML, JNDI, DSMLv2, LDIF, LDAP, ODBC, JDBC, JMS, JAAS, ISIM APIs
• Excellent written and oral communication skills with experience influencing Sr. Leaders and C-level executives.

Preferred (but not required):

• ISIM Certified Deployment Professional
• ISAM Certified Deployment Professional
• Experience dealing with international locations and cultures is a plus.