Security Engineer - Identity & Access Management (Hybrid)

We are opening our doors for talented individuals who are passionate about Cyber Security, want to be part of innovation by implementing and driving cutting edge technologies within a world class organization.

If you have a strong background in UNIX & Wintel technologies and consider yourself a technology leader with excellent communication skills, have a wide variety of skillset including a firm grasp of operating systems, hands on scripting/programming, networking protocol implementation and various virtualization technologies, then Citi is a place for you to be, as we offer the environment where skills like these can thrive.

As a Security engineer you will:

• Manage various franchise critical security application Infrastructure, specifically in secrets and privileged access management domain
• Own and drive the deployment (from scratch), maintenance and L3 support of managed applications
• Collaborate with various internal and external stakeholders/support teams and product vendors to manage all the aspects of the support process
• Gather product requirements, deploy solutions mapped to business needs and continuously evaluate to stay current with evolving requirements
• Size and procure the required hardware/software for new deployments and collaborate with various teams like system admin, DBA and others to build the required Infra
• Work with client applications to provide integration/onboarding guidance
• Facilitate security assessments and remediation to ensure safety and soundness. Be responsible to assess the risk and associated impact of all operational issues and change events and react quickly to escalate to technology management in a timely manner when required
• Document the product, process, and train L1/2 teams for BAU support
• Automate manual tasks and continuously review/upgrade stale processes
• Provide SME (Subject Matter Expert) support for the managed applications
• Perform Capacity, Performance and Stability reporting and Management
• Lead initiative to develop/improve scripts and other programs for system monitoring and maintenance
• Lead Infrastructure projects and facilitate security assessment and remediation for the infrastructure associated the applications in scope

Ideal background:

• 8+ years of relevant work experience
• Excellent written and verbal communication skills in English
• Proficiency in one or more of these scripting languages - Python, Unix Shell, Perl & PowerShell scripting
• Hands-on experience working with Linux and/or Windows Servers
• Experience/basic understanding of CHEF, Ansible, CI/CD
• Good grasp of networking concepts and protocols
• Experience with Web Servers/Application deployment, interacting with Web APIs using various protocols and framework (E.g. REST)
• Understanding of containerization and associated technologies like Kubernetes/OpenShift
• Experience with RDBMS or NoSQL databases from application programmer's perspective. Understanding of how to interface with these databases, analyze & write complex queries/procedures
• Good to Have
  • Experience managing CyberArk and HashiCorp Vault would be a big plus
  • Hands-on programming experience in Python, Core Java, Perl, .NET languages, Google Golang
  • SRE/DevSecOps/DevOps Certification or experience
  • Operating System certifications like MCSA (Windows Server), RHCSA, RHCE, CompTIA Server+

Benefits:

• Competitive compensation package with a wide range of benefits:
  • Cafeteria Program
  • Home Office Allowance - for colleagues working in hybrid and remote work models
  • Paid Parental Leave Program - maternity leave and paternity leave
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support colleagues' in managing work - life balance
• Continuous career progression opportunities across geographies and business lines
• Inclusive and friendly corporate culture
• Socially active employee communities with diverse networking opportunities

Apply to join the world's most global bank and discover the true extent of your capabilities! -------------------------------------------------
Job Family Group:
Technology -------------------------------------------------
Job Family:
Information Security ------------------------------------------------------
Time Type:
Full time ------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .

View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting