Sr. Security Engineer II

YUM; Gurugram District; Hybrid; INR 3,500,000 - 5,500,000; Full time

Job summary

YUM! is seeking a Sr. Security Engineer II to oversee IAM operations, lead global IAM teams, and shape the architecture of authentication and access across Yum's digital assets. The role emphasizes cross-functional collaboration, security governance, and strategic IAM roadmapping for web and mobile platforms.

The candidate will mentor teams, drive integration projects, and evaluate new security technologies to enhance secure access and incident response across global locations.

Qualifications

• IAM subject matter expertise with 10-14 years in operations, implementation and development.
• Minimum of 5 years leading technical teams with responsibility for Global IAM operations.
• Deep understanding of Identity and Access Management Architecture and Operations.
• Knowledge of Java J2EE, Struts, WSDL, Web 2.0/WSRP is required.
• Knowledge of SSO and Federation.

Responsibilities

• Oversee IAM operations, incident investigation, problem resolution and technical consultation.
• Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.
• Develop operation specifications for new IAM services, applications and service offerings.
• Work with IAM architecture team to solve business problems following current standards.
• Build enterprise-wide custom integration solutions with applications, services and processes to drive business results and security standards.
• Participate in cross-functional project planning to ensure security and recovery of critical systems.
• Lead research of IAM systems, SSO and authentication technologies to improve productivity and secure access to Yum's global assets.
• Develop a 1-3 year global IAM road map for in-store, above store, and consumer technologies.
• Ensure development of secure application and authentication standards for Yum's digital growth on web and mobile platforms.
• Research and evaluate new security solutions, including lab tests and pilots, and make recommendations for global operations.
• Provide leadership to brand and Cybersecurity division IAM.

Skills

IAM operations

Technical leadership

Security architecture

Identity and Access Management

Cross-functional collaboration

Education

BE/B.Tech

CISSP certification

Tools

IBM Security IAM

Active Directory

ISIM

ISAM

Ping Federation

Web Services/SOA

J2EE

Job description

Building global, iconic brands people trust and champion

Sr. Security Engineer II

YUM!

Hybrid

Oversee IAM operations, incidence investigation, problem resolution and technical consultation.Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.

Develop operation specifications for new IAM services, applications and service offerings

Work with IAM architecture (integrated process, applications, data and technology) team to solve business problems in alignment with the current standards

Work with IAM architecture and development Team to build enterprise-wide custom integration solutions w/ applications, services and processes that drive business results ensuring all Yum Security Standards.

Participate in cross functional project planning activities to ensure project success and security and recovery of critical systems.

Lead research of Identity and Access Management (IAM) Systems, Single-Sign-On and Authentication Technologies which lead to higher productivity and easier secure access to Yum's global digital assets. Assets include information, desktops, servers, web services, applications, contracts and mobile devices.

Develop a global 1-3 year road map for Identity and Access Management for in-store, above store, and consumer facing technologies.

Ensure development of secure application and authentication standards to enable Yum's digital growth initiatives in both web based and mobile platforms.

Research and evaluate new security solutions, including lab tests, proof of concepts and pilots. Make operational and technology recommendations which influence Yum's global operations.

Provide leadership to brand and Cybersecurity division- IAM

EXPERIENCE (and other qualifications):

IAM Subject Matter Expertise with at least 10 - 14 years on operations, implementation and development experience integrating security solution w/ business application and processes.

Minimum of 5 years leading technical teams with responsibility for Global IAM operations

A deep understanding of Identity and Access Management Architecture and Operations is required.

Knowledge of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.

Knowledge of SSO and Federation required.

Knowledge of Web Services Architecture required.

Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.

Detailed familiarity with ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development

Detailed familiarity with ISAM and Ping Federation Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access

A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.

Strong knowledge of Internet technologies and XML integration, including XML-Schema, XML-RPC, XML-SOAP, and/or Web Services/SOA

Detailed familiarity with JSP/Servlets, SPML, DAML, JNDI, DSMLv2, LDIF, LDAP, ODBC, JDBC, JMS, JAAS, ISIM APIs

Excellent written and oral communication skills with experience influencing Sr. Leaders and C-level executives.

Preferred (but not required):

ISIM Certified Deployment Professional

ISAM Certified Deployment Professional

Experience dealing with international locations and cultures. A plus

EDUCATION:

BE-BTECH degree, Certified Information Systems Security Professional (CISSP) a plus.