Advanced proficiency in Okta, Azure App Gateway, Zuul Gateway, Azure CIEM, Azure Entra, Active Directory, Plain ID, Oracle Entitlement Server, Venafi, Oracle Unified Directory, LDAP, PKI, Pivotal Cloud Foundry, Spring Boot, Spring Security, TerraForm, PING Access, Ping Federate, Okta Threat Insights, Azure DevOps, SCRUM, Java Development and Architecture
Experience leading Authentication & Authorization for workforce, clients, and cloud environments
Strong leadership and people management skills for IAM/CIAM teams
Ability to partner with enterprise architecture, engineering, operations, business, technology, information security, risk, and audit teams
Expertise in IAM governance, standards, controls, least privilege principles, and lifecycle management
Responsibilities
Oversee design and implementation of strategic technology and operational objectives for Access Management and CIAM towers within Northern Trust IAM Organization
Serve as people manager for IAA & CIAM functions, aligning capabilities to business, technology, and department objectives
Represent IAM organization’s client identity lifecycle, workforce and client authentication, and authorization capabilities; provide guidance to business units, technology, risk, and audit teams
Own IAA and CIAM least privilege principles and associated authentication/authorization practices
Lead Authentication & Authorization for workforce, clients, and clouds; partner with IAM Architecture, Engineering, and Operations
Lead enforcement of IAA & CIAM standards development, best practices, and controls across Northern Trust for centrally or decentralized managed applications/platforms
Lead client identity, authentication, and authorization metrics and analytics collection/reporting to all levels of leadership
Partner with business-aligned technology teams to onboard business-critical applications/platforms to IAM IAA & CIAM tools
Manage major incident response procedures for privileged access incidents in CIAM and IAA
Lead team for continuous monitoring mechanisms for enterprise authentication and authorization
Handle IAA & CIAM related communications and business-aligned IAM progress reporting
Responsible for enterprise-level training on access management principles, practices, standards, and controls
Manage IAA & CIAM related audit, regulator responses, and deliverables
Define and implement management framework for enterprise authentication/authorization security systems and client identity systems/lifecycle management
Formulate and execute strategic roadmaps for 1st line of defense IAM governance practices; ensure alignment with other IAM capabilities
Develop workforce and client governance policies, standards, and control adherence; partner with 2nd/3rd line of defense teams