Sr. Security Engineer II

Yum! Brands; India; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Yum! Brands is seeking an experienced Identity and Access Management (IAM) leader to oversee global IAM operations, incident investigations, and cross-functional security initiatives.

You will mentor teams, develop operation specs for new IAM services, and drive alignment with Yum Security Standards across web, mobile, and enterprise assets. The role requires deep IAM architecture knowledge, hands-on experience with ISIM/ISAM, SSO, and federation, and leadership of international teams.

Qualifications

• 10–14 years in IAM operations, implementation and development.
• 5+ years leading global IAM teams.
• Deep IAM architecture and operations knowledge required.
• Experience with IBM Security, AD, ISIM/ISAM and federation.

Responsibilities

• Oversee IAM operations, incident investigation, and problem resolution.
• Develop operation specs for new IAM services and offerings.
• Collaborate with architecture teams to solve business problems.
• Lead enterprise-wide custom integration solutions with security standards.
• Build a global 1–3 year IAM roadmap for in-store and digital platforms.
• Research new security solutions and pilot implementations.

Skills

IAM operations

Leadership

Security architecture

SSO & Federation

Cross-functional collaboration

Mentoring & coaching

Education

BE/BTech in CS/EC

CISSP certification (plus)

Tools

IBM Security

Active Directory

ISIM

ISAM

Ping Federation

Web Services

JSP/Servlets

Job description

• Oversee IAM operations, incidence investigation, problem resolution and technical consultation. Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.

• Develop operation specifications for new IAM services, applications and service offerings

• Work with IAM architecture (integrated process, applications, data and technology) team to solve business problems in alignment with the current standards

• Work with IAM architecture and development Team to build enterprise-wide custom integration solutions w/ applications, services and processes that drive business results ensuring all Yum Security Standards.

• Participate in cross functional project planning activities to ensure project success and security and recovery of critical systems.

• Lead research of Identity and Access Management (IAM) Systems, Single-Sign-On and Authentication Technologies which lead to higher productivity and easier secure access to Yum’s global digital assets. Assets include information, desktops, servers, web services, applications, contracts and mobile devices.

• Develop a global 1-3 year road map for Identity and Access Management for in-store, above store, and consumer facing technologies.

• Ensure development of secure application and authentication standards to enable Yum’s digital growth initiatives in both web based and mobile platforms.

• Research and evaluate new security solutions, including lab tests, proof of concepts and pilots. Make operational and technology recommendations which influence Yum’s global operations.

Provide leadership to brand and Cybersecurity division- IAM

EXPERIENCE (and other qualifications):

• IAM Subject Matter Expertise with at least 10 - 14 years on operations, implementation and development experience integrating security solution w/ business application and processes.

• Minimum of 5 years leading technical teams with responsibility for Global IAM operations

• A deep understanding of Identity and Access Management Architecture and Operations is required.

  • Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.

  • Knowledge of Web Services Architecture required.

  • Knowledge of SSO and Federation required.

  • Knowledge of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.

• Detailed familiarity with ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development

• Detailed familiarity with ISAM and Ping Federation Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access

• A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.

• Strong knowledge of Internet technologies and XML integration, including XML-Schema, XML-RPC, XML-SOAP, and/or Web Services/SOA

• Detailed familiarity with JSP/Servlets, SPML, DAML, JNDI, DSMLv2, LDIF, LDAP, ODBC, JDBC, JMS, JAAS, ISIM APIs

• Excellent written and oral communication skills with experience influencing Sr. Leaders and C-level executives.

Preferred (but not required):

• ISIM Certified Deployment Professional

• ISAM Certified Deployment Professional

Experience dealing with international locations and cultures. A plus

EDUCATION:

BE-BTECH degree, Certified Information Systems Security Professional (CISSP) a plus.