Authentication Services Architect

Job Description

PURPOSE:Security Technology Services (STS) is a critical function within Standard Chartered Bank operating under the overall purview of Technology Services .The STS team is made up of cyber security thought leaders, who are accountable for the provision of a global set of cyber security services and products to maintain and continuously improve Bank s cyber security posture in today s ever evolving cyber security landscape.The STS team protect the Bank from cyber security threats by delivering effective information security technology services, managing and responding to security incidents to ensure, and support the continuity and growth of Bank s business operations; and meet the both internal and external stakeholders expectations across 70+ countries and territories, in which SCB operates.As part of the Security Transformation activities within SCB, STS is going through a capability transformation covering process and technology. This requires highly skilled and experienced cyber security architects to work with each key service line, to define, build and implement threat driven capability roadmaps, patterns and drive an innovative vision for security to protect the Bank from complex cyber threats in support of the Security Architecture & Capability Authority.RESPONSIBILITIES: Define and manage the Authentication Services architecture artefacts and corresponding target state roadmap within the given functional and technical standards in alignment with the Security Architecture Authority and the Authentication Services process landscape defined by the Authentication Services Business Analyst.Aligns Authentication Services architecture principles with Security Architecture Authority and ensures alignment of the both roadmaps to Security Principles and Architectural Framework. Assesses impact of new requirements and ensures adequate change management and synchronisation between service and function target state.Review changes to the Authentication service architecture as required by projects or programmes. Actively exchanges knowledge in all matters related to threat led architecture, design, and risk and ensures that the defined architecture and strategy is implemented correctly within the Authentication service domain.Responsible for the high level architectural design of all solutions within the Authentication services in conjunction with the respective Authentication service managers for Multi Factor Authentication (MFA), Single Sign On(SSO), Directory Services and ensures all design patterns are appropriately documented and maintained in the corresponding repositories and these reflect both the current implementation and the intended target view.Responsible for the strategic evolution of the capabilities within the Authentication service domain in alignment with changing business needs, threat landscape and technical requirements to increase the quality of the selected solutions concerning identify, protect, detect, respond & recovery domains. This also includes topics such as long-term sustainability and convergence of products over time and replacement of existing products.Devise the service delivery strategies alongside the service managers and assist the Head of Authentication Services with the preparation and maintenance of the service roadmaps and also assist the respective Product Specialists/Managers with the preparation and maintenance of the Authentication Services Product Roadmap.Monitor and understand the market and threat landscape and provide inputs of resulting opportunities and risks for the Authentication services domainRepresent the Authentication service domain in key service architecture governance forums which include the Technology Standards Council (TSC) and Security Architecture and Capability Authority (SACA) forum.Ensure that the platform conforms to Standard Chartered security best practises and is fully consistent with Bank audit and compliance requirements.Ensure all relevant platforms are being efficiently and appropriately supported in SCB Continuous Integration / Continuous Deployment (CI/CD) toolchains, including identifying opportunities for toolchain and operational practise improvement and refinement across Cloud and non-Cloud environments.Support adoption of containers and container control frameworks wherever possible.Architectural design and continuous improvement of the platform adhering to regulator and compliance requirements.KEY STAKEHOLDERS:Security Trust and Solution Centre Cyber Capabilities, Architecture and InnovationSecurity Technology Services Service Architects and Operational teamsRespective Technical Service Engineering Product HeadsBusiness & CIO StakeholdersCOMPETENCIES (KNOWLEDGE & SKILLS):Minimum 10 years experience in Banking, Information Security TechnologyIn depth understanding of cyber-attack methodologies, vectors and corresponding mitigations in an Enterprise environment.Minimum 5-10 years experience in Authentication Services related Design, Architecture or Engineering with experience leading a team in delivering technology centric customer focused servicesStrong Technical skills and good understanding in Authentication Technologies related to Authentication Services core technical or product requirements.Bachelor Degree in Engineering, Computer Science/Information Technology or its equivalent with security related certifications (e.g. SANS GIAC, SABSA, CISSP).Deep experience in multi-tier application architecture in the context of Authentication Services, Kerberos, OAuth, SAML, Authentication/SSO standards, Directory Services solutions.Experience with broad range of security technologies including IAM, PIM, certificate management, Secure Vault solutions like HashiCorp Vault, AWS KMS, Azure Key Vault, API Gateway Authentication, IRM, O365, AIP, DLP, cryptography Solutions.Knowledge of technical security control environments and compliance frameworks including CSA CCM, ISO 27017 and NIST 800-53.Highly entrepreneurial with a high level of motivational energy, passion in field and an unrelenting drive to success.Strong sense of personal ownership and responsibility in accomplishing the service line and function goals.Able to get things done in a fast-paced environment. Be transparent and open around what doesn t work and what doesExcellent organisational and leadership skills (successfully lead and managed end-to-end technology services and or technology operations) with ability to manage multiple deadlines and effectively prioritiseExperience of developing an effective stakeholder strategy, influencing relevant stakeholders and decision makers, and executing decisions efficiently and consistently.Ability to lead and control programme and/or project management in the context of a significant amount of change.Excellent communication skills oral, written and presentation; technical reporting writing across various types of target audiences.,

Keyskills :
cyber securitytechnical skills change managementsecurity services leadership skillsproject management directory servicesservice