Cloud Security Solution Architect

• Collaborate with cross-functional cloud teams in Citi including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud
• define and develop preventive guardrails, detective controls, and automated alerts and remediation to ensure IAM implementation in all cloud environments are compliant with Citi’s cloud security standards and policies
• build automation software to enable self-service access requests and remediation for over privileged or unused access
• define SDLC for IAM roles and policies and develop IAM CI/CD pipeline with automated testing and validation
• define governance process and develop tools for managing cloud IAM inventory and entitlement review
• serve as a technology subject matter expert for internal and external stakeholders and provide direction for all firm mandated controls and compliance initiatives, all projects within the group and in creating a technology domain roadmap
• ensure that all integration of functions meet business goals

• 6-10 years of relevant experience in an Engineering role
• experience working in Financial Services or a large complex and/or global environment
• highly motivated self-starter with excellent interpersonal and communication skills
• experience in the design and implementation of enterprise software solutions involving cross-functional collaboration
• proficiency in Python, Java and Terraform
• expertise in architecture and solution development for AWS, GCP or Azure
• experience with modern DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines
• experience with Identity and Access Management and directory services is a plus
• ability to work independently, multi-task, and take ownership of various parts of a project or initiative
• ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

Experience with Identity and Access Management and directory services

• Medical, dental & vision coverage
• 401(k)
• life, accident, and disability insurance
• wellness programs
• planned time off (vacation)
• unplanned time off (sick leave)
• paid holidays