Sr Security Engineer II

Yum! Brands; Gurugram District; On-site; INR 1,800,000 - 3,600,000; Full time

Job summary

Yum! Brands in Gurgaon seeks an experienced IAM leader to oversee operations, incident response, and security consulting for global digital assets.

You will mentor the IAM team and drive enterprise-wide identity and access initiatives aligned with Yum's security standards. Responsibilities include developing 1–3 year IAM roadmaps for in-store and consumer technologies, evaluating new authentication solutions, and collaborating with architecture and development teams to deliver secure, scalable

Qualifications

• IAM subject matter expertise with 10–14 years in operations, implementation and development.
• Minimum of 5 years leading technical teams with global IAM operations.
• Deep understanding of Identity and Access Management Architecture and Operations.
• Knowledge of SSO and Federation; Web Services Architecture.
• Experience with IBM Security ISIM/ISAM and Active Directory.
• Familiarity with ISIM customization and Federation concepts; strong security knowledge.

Responsibilities

• Oversee IAM operations, incident investigation, problem resolution and technical consultation.
• Develop operation specifications for new IAM services and offerings.
• Collaborate with IAM architecture to solve business problems per current standards.
• Lead enterprise-wide integration solutions driving business results while complying with Yum Security Standards.
• Guide cross-functional project planning to ensure security and recoveries.
• Develop a global 1–3 year IAM road map for in-store and consumer technologies.

Skills

IAM expertise

Team leadership

Java/J2EE

SSO & Federation

Web services/SOA

IBM Security ISIM/ISAM

Active Directory

Security architecture

XML integration

Communication with Sr Leaders

Education

BE/BTech

CISSP (preferred)

Tools

ISIM

ISAM

PingFederation

LDAP/Directory services

Job description

Job Description

• Oversee IAM operations, incidence investigation, problem resolution and technical consultation. Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.
• Develop operation specifications for new IAM services, applications and service offerings
• Work with IAM architecture (integrated process, applications, data and technology) team to solve business problems in alignment with the current standards
• Work with IAM architecture and development Team to build enterprise-wide custom integration solutions w/ applications, services and processes that drive business results ensuring all Yum Security Standards.
• Participate in cross functional project planning activities to ensure project success and security and recovery of critical systems.
• Lead research of Identity and Access Management (IAM) Systems, Single-Sign-On and Authentication Technologies which lead to higher productivity and easier secure access to Yum’s global digital assets. Assets include information, desktops, servers, web services, applications, contracts and mobile devices.
• Develop a global 1-3 year road map for Identity and Access Management for in-store, above store, and consumer facing technologies.
• Ensure development of secure application and authentication standards to enable Yum’s digital growth initiatives in both web based and mobile platforms.
• Research and evaluate new security solutions, including lab tests, proof of concepts and pilots. Make operational and technology recommendations which influence Yum’s global operations.

Provide leadership to brand and Cybersecurity division- IAM

EXPERIENCE (and Other Qualifications)

• IAM Subject Matter Expertise with at least 10 - 14 years on operations, implementation and development experience integrating security solution w/ business application and processes.
• Minimum of 5 years leading technical teams with responsibility for Global IAM operations
• A deep understanding of Identity and Access Management Architecture and Operations is required.
• Knowledge of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.
• Knowledge of SSO and Federation required.
• Knowledge of Web Services Architecture required.
• Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.
• Detailed familiarity with ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development
• Detailed familiarity with ISAM and Ping Federation Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access
• A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.
• Strong knowledge of Internet technologies and XML integration, including XML-Schema, XML-RPC, XML-SOAP, and/or Web Services/SOA
• Detailed familiarity with JSP/Servlets, SPML, DAML, JNDI, DSMLv2, LDIF, LDAP, ODBC, JDBC, JMS, JAAS, ISIM APIs
• Excellent written and oral communication skills with experience influencing Sr. Leaders and C-level executives.

Preferred (but Not Required)

• ISIM Certified Deployment Professional
• ISAM Certified Deployment Professional

Experience dealing with international locations and cultures. A plus

Education

BE-BTECH degree, Certified Information Systems Security Professional (CISSP) a plus.