Information Security Engineer
2 days ago
City of London
Cantor Fitzgerald’s Global Information Security team is seeking an Information Security Identity Engineer. The successful candidate will need to be able to work in a fast-paced environment, planning, coordinating, and executing all facets of our program. Responsibilities will include: • Strong experience with authentication systems such as LDAP, MS Active Directory, Kubernetes, and Microsoft Entra including OIDC, OAuth, and SAML 2.0 protocols. Experience with Microsoft Authentication Libraries (MSAL) a plus. Experience with B2C configurations also a plus., • Experience with privileged access management solutions (PAM) such as CyberArk, Keeper, etc., • Experience with Identity Governance solutions like SailPoint, IBM, Oracle, etc., • Partner with DevSecOps teams to embed IAM best practices into CI/CD pipelines, automating identity governance and access controls., • Define and enforce security and identity policies across cloud platforms. (AWS, Azure, GCP), • Document system configurations, standards, and procedures in a centralized location., • Support Incident Response on security incidents globally, including contributing to table-top security incident exercises., • Advise project teams, application owners, infrastructure services, and other digital Information Technology teams on information security controls., • Continually improve team documentation, including solution run books, architecture, knowledge base articles, FAQs, SharePoint., • Provide evidentiary support for Audit and Compliance teams., • Manage the remediation process including tracking and resolutions of findings from internal and/or external audit findings, risk assessments, and other control assessments., • Develop and maintain a strong partnership with relevant regional business and technical leaders and teams, including 3rd parties and affiliate businesses., • Monitoring, collecting, analyzing and reporting of security metrics and indicators to ensure the proper operations of our regional systems and services., • Regional security incident response and management point of contact and drive incident postmortems to find the root cause and track action items to completion., • Experience working with Service Management, Incident Management, and Change Management required. Qualifications and Skills: Education • Bachelor's Degree (or equivalent work experience)., • At least five+ years of identity and access management experience in IT and/or Information Security combined. Must-Have Skills • Manage Identity Providers such Microsoft Entra (formerly AAD), Okta, Ping One, Auth0, etc., • Strong experience with authentication protocols including OAuth, OIDC, SAML, etc., • Experience with PAM and Remote Desktop Solutions (CyberArk, Keeper, Venn, Zscaler, Global Protect, etc.), • IGA solutions and deployments (SailPoint, Saviynt, Oracle, etc.), • Integrating security systems via API, etc., • Experience with ticket management solutions: Dynamics 365, ServiceNow, Remedy, etc., • Experience with PMO tools such as Smartsheet, Monday.com, etc., • Microsoft O365 products (Excel, PowerPoint, etc.), • Collaboration and communication skills across multiple teams and businesses. Good-to-Have Skills • Palo Alto Firewall, F5 LTM, F5 GTM, • SIEM and SOAR tools (Splunk, Cribl, PAN Cortex), • Powershell, • Python Scripting, • Power BI and Power Automate.