Senior Vice President, Identity and Authentication Engineer

BNY Mellon; Pittsburgh (Allegheny County); On-site; USD 150,000 - 200,000; Full time

Job summary

BNY Mellon is seeking a Senior Vice President, Identity and Authentication Engineer to enhance its Identity and Access Management team in Pittsburgh, PA. You will design and support a highly available SiteMinder environment, lead federation service configurations, and develop access control policies for seamless experiences.

The ideal candidate has 10-12 years of experience, a Bachelor's degree, and expertise in SSO technologies such as SAML and OAuth. Join us to shape secure access for our organization.

Qualifications

• 10-12 years of experience in information security or related technology.
• Experience supporting enterprise identity and access management platforms.
• Strong development and scripting skills in automation tools.

Responsibilities

• Design and support SiteMinder federation and web access management.
• Lead configuration of federation services using industry-standard protocols.
• Develop and manage access control policies across applications.

Skills

SiteMinder administration

SAML 2.0

OAuth

OpenID Connect

Azure AD / Microsoft Entra ID

LDAP concepts

Python

PowerShell

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline

Job description

We're seeking a future team member for the role of Senior Vice President, Identity and Authentication Engineer to join our Identity and Access Management team. This role is in Pittsburgh, PA or Lake Mary, FL.

In this role, you'll make an impact in the following ways:

Responsibilities

• Design, implement, and support a highly available and scalable SiteMinder federation and web access management environment across enterprise platforms.
• Lead the configuration and maintenance of federation services using industry-standard protocols such as SAML 2.0, OAuth, and OpenID Connect, including Identity Provider (IdP) and Service Provider (SP) integrations.
• Design, implement, and support Azure AD / Microsoft Entra ID-based single sign-on (SSO) integrations for enterprise and cloud applications, ensuring secure and seamless access experiences.
• Develop and manage access control policies, realms, rules, and responses to secure critical applications, data, and enterprise resources.
• Partner with application, infrastructure, and security teams to deliver seamless single sign-on (SSO) integrations, troubleshoot complex authentication and authorization issues, and enhance the overall user access experience.
• Build and support automation solutions to streamline onboarding, configuration, deployment, monitoring, and operational support activities across the identity and access management environment.

To be successful in this role, we're seeking the following:

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent combination of education and practical experience.
• 10-12 years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.
• Significant experience supporting enterprise identity and access management platforms, with strong expertise in SiteMinder administration and federation services.
• Demonstrated hands‑on experience with single sign-on and federation technologies, including SAML, OAuth and OpenID Connect.
• Hands‑on experience implementing and supporting Azure AD / Microsoft Entra ID SSO, including application integration, conditional access considerations, and federation with enterprise identity platforms.
• Strong knowledge of LDAP concepts, directory structures, schema, queries, authentication flows, and integration with enterprise identity stores.
• Strong development and scripting skills with experience in automation using technologies such as Python, Shell scripting, PowerShell, REST APIs, or similar tools.
• Strong understanding of authentication, authorization, SSL/TLS, certificate management, and secure access controls within complex enterprise environments.
• Excellent problem-solving, collaboration, and communication skills, with the ability to work effectively across cross-functional teams and support mission-critical authentication services.