Must Have Technical/Functional Skills
- Experience in information security, or an equivalent combination of education and work experience.
- Deep knowledge of application or infrastructure systems architecture, usually having experience with multiple system technologies.
- Good understanding of agentic application architecture and impact of them on IAM domain
- Excellent consultative and communication skills, and the ability to work effectively with client, partner, and IT management and staff.
- Ten years of experience in the Information Security role. Five years of experience as a Tech lead
- Strong collaboration skills and analytical ability
Good to have
- CISSP, CSSP, or Cloud security certification preferred
- Certifications on Azure, AWS security will be preferred
Roles & Responsibilities
- Lead Identity centric Workforce Security team to develop authentication and access management solutions
- Drive the development of identity solutions, access patterns, modern security protocols, practicing Zero trust, least privileged, defense in depth principles
- Good understanding of AI concepts, Patterns and impact on identity and access management domain
- Participate and engage in AI adoption with Identity focus, knowledge and understanding of Entra ID agentic Identity, authentication flows and Patterns
- Review and provide feedback on Identity and access management related security solutions proposed by stakeholders and can provide consultation to the partners and IT Management
- In-depth knowledge and experience on Entra ID, EPM, Sentinel, Azure, AWS Security
- Knowledge on Okta, PingFederate, Entitlement management solutions
- Strong knowledge on Identities management on Azure AD with OAuth, OIDC, SAML, SSO, MFA, Conditional access policies, MFA, Kerberos, LDAP, Identity Federations etc.
- Experience in providing security solutions for Java based Micro services, React based frontends and Android/iOS based mobile applications on the Azure
- Hands-of experience in JWT, session handling, Code signing, Certificate authentication, TLS/SSL, API Security, Application registration, application integration scenarios etc.
- Awareness of API Management, Firewalls, DLP, VPNs, DNS, Azure Defender, MCAS, Sentinel, WAFs, Application Gateways, NSGs, App Proxy, Radius clusters, CDN etc.
- Good understanding of Cloud Infrastructure Entitlement Management solution (CIEM) to ensure smooth remediation of toxic combinations, high risk entitlements etc.
- Understanding and application of threat modeling concepts and methodologies
- Understanding of Applications security, OWASP standards, security best practices, browser compatibilities/storages/cookies
- Acts as Workforce cybersecurity expert to in solutions spanning end user computing, proxy solutions, MFA, SSO, conditional accesses, Passwordless, Yubikey, bio-metric solutions, identity and governance scenarios, Secrets Management, automation, role based access control, Privileged identity management, Just in time accesses etc.
- Participates in solutions to support- token handling, OIDC/ OAuth flows, authorization patterns, identity federation, cloud architectures, cryptography, cloud native services, cloud security etc.
- Deeper understanding on Cloud Security areas such as Policies, RBAC, activities, identities, privileged access management etc.
- Ability to support operations in troubleshooting complex identity scenarios with hands-on experience on Sentinel/KQL/Audit logs etc.
- Good understanding of concepts related to docker Security, container orchestrations/Kubernetes
TCS Employee Benefits Summary:
Discretionary Annual Incentive.
Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
Family Support: Maternal & Parental Leaves.
Insurance Options: Auto & Home Insurance, Identity Theft Protection.
Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
Time Off: Vacation, Time Off, Sick Leave & Holidays.
Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
Salary Range: $120,000 - $130,000 a year