Web Security and Authentication Engineer

Position : Web Security and Authentication Engineer

Experience: 5 to 8 Years

Notice period: Immediate to 15 Days

Location : Chennai

Type for Interview: F2F Interview (Final Discussion)

Direct Responsibilities:

• The mission has different aspects:
• Design, deliver and support the integration layer between operating systems and business applications within distributed environments for Web information exchange solutions
• Focuses on the integration of web applications in the Web Infrastructure, for the intranet as well as for the DMZ.
• Deploy and maintain a consistent and complex Web site infrastructure
• Help to identify, recommend, and prioritize new Web features in conjunction with application developers and architects.
• Ability to challenge new and existing solutions, architectures and defend it towards the interest of the bank (maintenance, costs, security,)
• Identify reusable components required for Web Security and ensure the high quality of the service.
• Share knowledge with colleagues on technology subjects, solutions, best practices on vendor specific and also on generic security components

Contributing Responsibilities:

• Establish and document installations, guidelines, policies and procedures for relevant stakeholders.
• Assist architects in order to perform cost-benefit analyses of proposed Web implementations, enhancements, and modifications.
• Active participation in production support (incident, problem and change management) for the Web Security squad.
• Set and enforce compatibility and interoperability standards that ensure site accessibility for all users.
• Monitor and report on Web site traffic and performance.
• Participate in the automation and industrialization of our assets
• Participate in the On-Call calendar (7/7 from 18:00 7:30)

Technical & Behavioral Competencies:

Mandatory Skills

• Proven experience with reverse proxies, Webseal, ISVA or similar

• Proven experience with following Web technologies:

• TAMeB

• ISAM/ISVA (as from version 9and modules: AAC, Infomap, Federation)

• Good and proven knowledge on:

  Web access management, Web authentication practices, SSL/TLS( and mutual auth.), SSO, Identity Federation, PKI, certificates, OpenID Connect, OAuth 2.0, SAML 2.0, External Authentication Interface on WebSEAL

• Practical knowledge of Oauth and OIDC protocols
• Strong coding experience : Java, Python; Javascript server side (Rhino JS) are example of used languages & Ability to understand and translate existing code sources
• Good knowledge on: XML/XSLT

• Generic knowledge on: firewalls, application firewalls, load balancers, networks, DMZ, network security, anti-virus

• Knowledge in web and application servers including Apache and Websphere,
• Experience with support on e-Commerce, intranet and extranet development

Good to have Skills

• Security Token Service (STS) and/or TFIM experience + SOAP and WS-Trust knowledge
• Recent successful proven experience in similar/comparable scope
• Strong experience in security of Web Infrastructure in financial services
• Basic Shell scripting (automation of curl commands i.e)

• Familiar with DevOps methodologies and container technologies such as Docker

• Familiar with an agile environment

• Demonstrated team player with strong and effective customer care skills.
• Quick self-starter, pro-active and innovative attitude.
• Open minded and show flexibility in self-learning new technologies/tools.
• Good analytical and synthesis skills.
• Process-oriented with high attention to detail.

"kalidasan.ramasamy@kiya.ai"

Regards,

Kalidasan Ramasamy

Human Resource
kalidasan.ramasamy@kiya.ai www.kiya.ai