Lead Analyst

Bank of America; India; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

Bank of America is seeking a senior IAM specialist to design and implement identity and access management solutions, focusing on SSO technologies, cloud IAM, and Ping Federate/ Ping Access. The role supports large-scale, global deployments and requires strong Java/J2EE development skills, LDAP/AD knowledge, MFA, and risk-based authentication.

The position is based in India with work hours 1:30pm to 10:30pm.

Qualifications

• 7+ years of information security experience.
• Strong hands-on experience with SSO technologies and protocols (OAuth, OpenID Connect, FIDO, SCIM, LDAP, SAML).
• Expertise in Identity and Authentication solutions such as Ping Federate/ Ping Access (preferred).
• Strong experience in Cloud IAM for AWS, GCP and Azure; federation of cloud apps with PingFederate.
• Strong development experience in Java/J2EE.
• Knowledge of LDAP and Active Directory, MFA, risk-based authentication and privileged access management.

Responsibilities

• Contribute to story refinement and defining requirements.
• Understand and apply network, virtualization, and datacenter concepts for deployment strategies.
• Collaborate to integrate and control systems in operational environments per acceptance criteria.
• Work with development teams to understand system requirements.
• Handle large data sets meeting functional and non-functional needs.
• Build processes for transformation, quality controls, and workload management.
• Define deployment pipelines to enable faster, data-informed decisions.

Skills

SSO technologies

Ping Federate

Ping Access

PingIDM/SCIM

Cloud IAM

LDAP/AD

Java/J2EE

MFA

Risk-based authentication

Linux/Windows

Education

BE/BTech/CSE MSc

Job description

Process Overview

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank's Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, develops, deploys and manages a risk-based controls portfolio, manages and operates a global security operations center that monitors, detects and responds to cybersecurity incidents.

Job Description

This role involves specialization in Identity and Access Management (IAM) technologies with deeper understanding of SSO and authentication, directory services. Participates in design, development and implementation of systems engineering activities, to include OS technical support, systems programming, and data center capabilities. Responsible for components of complex engineering and/or analytical tasks and activities. Assists in establishment of input/output processes and working parameters for hardware compatibility and coordination of subsystems design and integration of total system. Serves as a fully seasoned/proficient technical resource; provides tech knowledge and capabilities as team member and individual contributor. Will not have direct reports but will influence and direct activities of a team related to special initiatives or operations. Provides input on staffing, budget, and personnel.

Responsibilities

• Contribute to story refinement/defining requirements.
• Understand and utilize basic network, virtualization, and datacenter technologies for deployment strategies.
• Work with solutions to integrate, transform and control systems in operational environments per the defined acceptance criteria.
• Work across development teams to understand and aid in the delivery of system requirements.
• Work with large, complex data sets that meet functional/ non-functional requirements.
• Build and improve processes supporting system transformation, structures, quality controls, dependency, and workload management.
• Define and build deployment pipelines that enable faster, better, data-informed decision-making within the business.
• Perform/Implement existing test suites (integration, regression, and performance), analyse test reports, identify any test issues/errors, and triage the underlying cause.
• Document and communicate required information for deployment, maintenance, support, and business functionality.
• Identify gaps in environment management standards adherence and work with appropriate partners to develop plans to close gaps.

Education

B.E./B.Tech/M.E./M.Tech/B.Sc./M.Sc./BCA/MCA (prefer IT/CS specialization)

Requirements

• 7+ years of experience in Information Security.
• Strong hands‑on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect, FIDO, SCIM, LDAP, SAML).
• Expertise in Identity and Authentication solutions such as Ping Federate/Ping Access (preferred).
• Strong experience in designing Ping policies including custom solutions.
• Strong expertise in development of Cloud IAM solutions for AWS, GCP and Azure.
• Strong experience in federating cloud applications with PingFederate.
• Strong experience in implementing identity synchronization to Cloud IAM using PingIDM/SCIM.
• Strong development experience in Java/J2EE technologies.
• Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management.
• Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine).
• Proficient in Linux, Windows, Tomcat, Web Logic, IBM WebSphere environments.
• Ability to utilize various programming or scripting languages such as Shell scripting, Perl, Java, Python, JavaScript and PowerShell.
• Familiarity with deployments and integration of IAM solutions within the cloud (Azure, AWS or Google Cloud).
• Experience in deploying large-scale, global projects and programs.
• Leadership skills and qualities which enable you to work with peers and various levels of management.
• Effective communication skills and motivation/willingness to learn.
• Experience range: 7+ years.

Desired skills

• Experience in Web‑Development technologies: HTML, XML, XSL/XSLT, XPATH and JavaScript.
• Understanding of API design concepts, RESTful Services and modern application interaction patterns.
• Familiarity with IT security and risk management practices.

Work Timings

1:30pm to 10:30pm

Job Location

Hyderabad, Chennai