Security Engineer - Web Access Management

Company: Marriott
Location: Jackson
Posted on: November 26, 2022

Job Description:

Job Number 22183313Job Category Information TechnologyLocation Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United StatesSchedule Full-TimeLocated Remotely? YRelocation? NPosition Type Management JOB SUMMARYSupports the Identity & Access Management (IAM) function in Global Information Security organization. Ideal candidate will bring subject matter expertise (L3) on Web Access Management (WAM) and SSO technologies and support the WAM/SSO service offerings, daily operations, and continuous improvements. Analyzes and implements changes to the Web Access Management infrastructure including configurations and customizations to address application, security, and performance requirements. Works with stakeholders to integrate additional consumers and helps troubleshoot integrations with existing applications and systems. Responsible for directing L2/L1 technical staff to address application security issues in a timely fashion This position will act as an WAM/SSO support point of contact for IT system administrators, Service Desk, service providers and application owners. Will routinely collaborate with different security team members including, but not limited to architecture, infrastructure, network, compliance, and incident response.CANDIDATE PROFILEEducation and ExperienceRequired: In addition to the degree,

• Bachelors degree in Computer Sciences or related field or equivalent work experience and certifications
• 5+ years of information technology experience that includes WAM/SSO solutions such as PingAccess, PingFederate, ForgeRock, Okta and/or IBM Security Access Manager
• 3+ years hands-on experience with Ping Access and Ping Federate architecture, design, and implementation a. Policy design and implementation b. Ping Fed custom adapter development c. Integration of custom applications
• 3 + experience of Federation/SSO services, protocols, and technologies a. OAuth/OIDC, SAML, WS-FED b. LDAP c. Browsers, MDM/MAM, X509 cert-based authentication (user & device)
• 3+ years of experience with LDAP and directory Services, databases, UNIX / Linux, Windows, database servers, application servers, and network infrastructure
• 2+ years of experience translating business requirements to technical requirements with strong written and verbal communication skillsPreferred:
  • 3+ years of experience delivering results up to / beyond expectations in a highly matrixed, cross functional organization
  • 3+ years of experience with integrating IAM solutions with infrastructure and applications
  • 2+ year of experience in Developmenta. JAVA, JSON/JavaScript, Pythonb. UI HTML/JavaScriptc. Scripting (Ansible, Shell, Perl, Expect)e. Automated testing tools - selenium
    • 2+ year of experience in designing & implementing API services and data transformation layers
    • 2+ years of experience on containerized deployment environments
    • Current information security certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified SCADA Security Architect (CSSA) or Certified Secure Software Lifecycle Professional (CSSLP)
    • Technical knowledge of industry best practices pertaining to WAM/SSO/MFA services
    • Experience with defining & fulfilling Key Performance Indicators for WAM infrastructure
    • Experience in the IAM domain with user lifecycle management, authentication, authorization, federation, and privileged access management
    • Experience with cloud providers such as AWS and Azure
    • Experience with cloud/SaaS IAM/WAM services
    • Experience with Zero-Trust Framework
    • Experience in implementing the following capabilities
    • Passwordless
    • Adaptive Authentication
    • Dynamic Authorization
    • Experience with CASB and WAF technologies.
    • Experience in researching emerging technologies and trends, standards, and products .
    • Experience doing business analysis and requirements gathering for complex business systems
    • Responsible for identifying, evaluating, and participating in decision making around new and emerging IAM/MFA technologies and should be able to support other areas of Information Security as needed
    • Strong understanding of PKI, certificate management, security, and provisioning of identity data.CORE WORK ACTIVITIES
      • Manage the WAM/SSO services including requirements gathering, design, building, testing, deployment, and operationalization.
      • Work with multiple stakeholders to support implementation of new applications and services.
      • Define and document WAM/SSO policies and procedures
      • Create test cases to ensure cross platform interoperability.
      • Implement and validate security controls for the WAM/SSO solution.
      • Design security solutions to adequately address risks throughout the Marriott SDLC process and confirm that the level of risk is acceptable in accordance with Marriotts policies.
      • Provide guidance and oversight for L2/L1 troubleshooting of operational issues with respect to identity vaulting.
      • Support the identification and remediation of security eventsColorado Applicants Only: The salary range for this position is $79,163.00 to $153,839.00 annually.New York City & Westchester County, NY Applicants Only: The salary range for this position is $95,786.00 to $169,222.00 annually.All Locations offer health care benefits, flexible spending accounts, 401(k) plan, accrued paid time off (including sick leave where applicable), life insurance, disability coverage, other life and work wellness benefits and may include incentive compensation. Benefits and incentive compensation may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions.Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.Marriott International is the worlds largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. We believe a great career is a journey of discovery and exploration. So, we ask, where will your journey take you?

Keywords: Marriott, Jackson , Security Engineer - Web Access Management, Engineering , Jackson, Mississippi