Description
Information security is foundational to Visa's culture and critical to our leadership in electronic payments. This role sits within Cybersecurity's Global Business-to-Business Identity & Access Management (B2B IAM) team, which secures access to Visa's business portals and associated services worldwide.
You will design, implement, and operate IAM solutions,primarily on ForgeRock,aligned to an evolving threat landscape, regulatory obligations, and enterprise architecture. You will partner closely with Operations, Database, and Middleware Engineering to meet or exceed SLA and availability targets while supporting compliance with GDPR, PCI DSS, and ISO/IEC 27001.
Responsibilities:
- Integrate web applications for single sign-on (SSO) using ForgeRock Access Management (AM).
- Establish and maintain federation using SAML 2.0, OpenID Connect, and OAuth 2.0.
- Configure authorization policies and build adaptive authentication trees/journeys in ForgeRock AM.
- Install, configure, harden, and tune ForgeRock AM in multi-region production environments.
- Design robust session management across geographically distributed locations.
- Install, configure, and operate ForgeRock Directory Services (DS), including replication and user directory synchronization.
- Configure LDAP password policies and ACIs; automate via custom scripts.
- Build a performance lab and execute load tests for access management components, model production traffic patterns into test scenarios.
- Deploy and manage ForgeRock web and application server agents.
- Work across heterogeneous stacks including Microsoft IIS, Apache HTTP Server, NGINX, Apache Tomcat, Node.js, and JBoss Web Server (JWS).
- Implement and support Multi-Factor Authentication (MFA) across varied use cases and factors.
- Serve as IAM subject matter expert (SME) for cross-functional stakeholders and global support groups.
- Produce high-quality technical designs, runbooks, and build/operational documentation.
- Collaborate effectively with globally distributed teams and make informed, time-sensitive decisions impacting user experience and support productivity.
Qualifications:
- Basic Qualifications: 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.
- Preferred Qualifications: Hands-on experience with web/application servers, LDAP technologies and directory administration, Linux and Windows operating systems, application, system, and performance monitoring tools, experience collaborating with cross-functional, geographically dispersed teams, working knowledge of software development methodologies, including Waterfall and Agile/Scrum, proven ability to execute and drive results collaboratively, excellent verbal and written communication skills, understanding of release management and familiarity with tools such as Jira, strong knowledge of web-based three-tier application and security architectures, experience with API authentication and authorization (e.g., OAuth 2.0, mTLS, JWT tokens), understanding of incident, change, and problem management and software release management processes, experience with Java and scripting languages (e.g., Shell, Python, Groovy) to develop custom IAM solutions and automation, experience applying AI/ML to IAM to enhance platform capabilities and reduce repetitive tasks, familiarity with security and privacy frameworks relevant to this role, including GDPR, PCI DSS, and ISO/IEC 27001.