Lead, Infrastructure Security Engineer - Active Directory and ADFS

Job Classification

Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

As a Lead, Infrastructure Security Engineer in the Workforce Identity Management team, you will partner with product owners, tech leads, engineers, and security stakeholders to improve Prudential’s identity and access management platform. An important function of this role is to ensure the identity platform remains in compliance with the Information Security Standards and processes. You will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude, and a continuous learning focus to all that you do.

• Review and understand all applicable Information Security Standards and Engineering Specifications; create an action plan to remediate out of compliance issues
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products
• Collaborate with our Information Security Office regularly to complete security hardening on identity management platforms
• Collaborate with other engineering teams to maintain a secure and highly available environment
• Coordinate the scheduling of patches and upgrades on identity management platform systems as well as ensure accurate operational information in CMDB
• Provide technical support to stakeholders and business applications teams
• Bring a strong understanding of relevant and emerging technologies, provide input and assist fellow team members
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.

• Bachelor of Computer Science or related experience in identity security related field
• Security identity architectures and frameworks, privileged access management
• Audit and compliance engagements and ability to field and tend to PCI/SOX/Fed regulatory requirements as well as remedial action plans
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills

• On-Premises Microsoft Identity platform
• Active Directory Domain Services (AD DS):
  Troubleshooting, Management, Health and Performance, Trust Relationships, Security Controls, Group Policy Object (GPO) Creation and Management, Replication and topology, DNS, Certificate management
• Active Directory Federation Services (ADFS):
  Troubleshooting, Management, Claims Rules, Relying Party Trusts, Web Application Proxy (WAP)
• Authentication protocols: LDAP, Kerberos
• Single Sign-On (SSO) protocols: SAML, WS-Federation
• Server Administration:
  Windows Server operating system
• Programming
  
  Languages:
  
  Power Shell scripting and automation
• Cloud Computing:
  Understanding and knowledge Microsoft Azure and Entra

• 10+ Years focused on IAM technology and 6+ Years in information technology/Cybersecurity.
• 10+ Years of Active Directory (AD) and AD FS Server Maintenance and Management
• Bachelor’s degree in computer science field or equivalent experience
• Experience with after hours on-call rotation

• Technologies:
  Hyper-V, Microsoft System Center Platform (SCCM, SCVMM, SCOM, SCORH), Splunk, Service Now
• Agile Format:
  …