About your team
The Global Cyber & Information Security function is a part of the Global Technology department. The Global Technology Group function provides IT services to the Fidelity International business. These include the development and support of business applications that underpin our revenue, operational, compliance, finance, legal, marketing and customer service functions. The broader organisation incorporates Infrastructure services that the firm relies on to operate on a day to day basis including data centre, networks, proximity services, security, voice, incident management and remediation.
Global Cyber & Information Security is made up of the following functions;
- Application Security (through secure coding practices, penetration testing, and developer training)
- Centralised Access Management working to principles of least privilege, access appropriate to role, and Role Based Access Control
- Cyber Defence Operations
- Security Assurance & Compliance
- Security Engineering Operations
- Security Architecture
- Information Security (and the ISO function)
- Customer Identity & Protection
- Cyber Strategy & Planning
The Customer Identity & Protection function is responsible for Customer Identity and Access Management for Fidelitys customer facing Web and Mobile applications globally, and well as, API Security, Edge Security and Customer Single Sign-on services. Our mission is to preserve customer trust through the delivery of well engineered security capabilities and positive omni-channel digital experiences.
About your role
Your role will be to provide support to the Product Owner for Customer Identity and Access Management (CIAM). CIAM sits within Customer Identity and Protection function and forms part of the Global Cyber and Information Security group. The purpose of the CIAM product team is deliver and support CIAM capabilities that are used globally to secure Fidelitys externally facing Web and Mobile applications.
Key Responsibilities
- Support the Customer Identity & Protection team to build and run the new Cloud-based CIAM platform that enables CIAM to deliver customer value at high pace.
- Deliver CIAM stories following defined CI/CD processes to the appropriate level of quality and with the right level of automated testing as prioritised by the Product Owner.
- Coach and develop team on Product specific knowledge.
- Deliver change and operations for CIAM product.
- Deliver technical and service solutions to meet agreed definition of ready and definition of done criteria for identified requirements, using Agile and DevOps practices.
Experience and Qualifications Required
- Strong experience is Customer Identity and Access Management products, ideally Ping Identity.
- Experience of developing secure CIAM journeys based on open standards such as OIDC, OAuth2 and SAML.
- Good understanding of risk assessment and fraud prevention tools and how to integrate them with CIAM journeys.
- Understanding of the principals of Adaptive Authentication, Mulit-Factor authentication and FIDO2.
- Experience of software delivery and SDLC best practice. Practical experience in Agile development methods - Scrum, Kanban, SAFe.
- Appreciation of DevSecOps principals including Scripting, Code Repositories, Code Pipelines, IaC, RESTful APIs, TDD
- Experience of developing solutions on Cloud platforms, ideally AWS.
- Strong communication and collaboration skills.
- Able to present to stakeholders at all levels of the organisation.
- Strong Problem Solving skills, can recommend and make final decisions in relation to actions required for operations and design.
- Strong appreciation for service management principals and service excellence.
- Sound knowledge of industry best practice regarding Service Management (E.g. ITIL)
- Security certifications like CISSP, GIAC or Cloud certifications like AWS, Azure are desirable..