Principal Systems Engineer

$165,700 - $180,000/Yr

Depository Trust Clearing Corporation - Jersey City, NJ

Full-time - Senior

Onsite - Jersey City, NJ

Credit Intermediation and Related Activities

About the position

The Principal Systems Engineer will be a key member of the Web Security Engineering team at DTCC, responsible for safeguarding critical and confidential information. This role involves architecting, designing, and implementing security solutions to protect employee and client identities, while ensuring compliance with industry best practices. The engineer will collaborate with various teams to gather requirements, develop solutions, and provide guidance on Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM).

Responsibilities

• Architect, design, and implement security solutions for employee and client identities.
• Gather requirements and develop solutions in collaboration with business and risk teams.
• Develop and support solutions using Ping Access, Ping Federate, PingID, and ISAM.
• Provide IAM and CIAM guidance to application teams.
• Troubleshoot access management issues related to Ping Federate, Ping Access, IBM ISAM, and IBM DataPower.
• Design and implement IAM workflows, software patches, and system upgrades.
• Coordinate with L1/L2 support and troubleshoot issues with technology suites.
• Monitor web security tools and ensure appropriate monitoring is enabled.
• Conduct comprehensive risk/vulnerability assessments and provide reports on findings.
• Design automated, cost-effective solutions based on business requirements.
• Manage PKI and certificate management processes.
• Build monitoring reports on the health and effectiveness of IAM services.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related field with 8 years of experience, or a Master's Degree with 5 years of experience.
• Experience in architecting, designing, and solutioning in IAM technologies.
• Proficiency with Ping Access, Ping Federate, and PingID products.
• Experience with IGA products such as Sailpoint or OIM.
• Familiarity with access management tools like ISAM and CyberArk.
• Knowledge of security protocols such as OAuth, OIDC, SCIM, FIDO, and SAML.
• Development experience using XML, XSLT, Java, and/or .Net.
• Experience implementing solutions on IAM tools and technologies.
• Familiarity with SOAP, WSDL, and REST APIs.
• Experience working in a Unix/Linux environment.

Nice-to-haves

• Experience with general IT infrastructure including server hardware and networking.
• Knowledge of automated solution design.

Benefits

• Telecommuting options a few days a week.
• Competitive salary range of $165,700.00 - $180,000.00 per year.