Director, Authentication Engineering

What you'll do

• Establish the engineering strategy and multi-year technology roadmap for enterprise authentication platforms and services.
• Ensure the security, resiliency, and scalability of critical authentication services including Microsoft Entra ID, Okta, and ForgeRock.
• Lead the modernization of legacy authentication systems toward phishing-resistant, passwordless, and cloud-integrated architectures.
• Partner with Cybersecurity and Cloud teams to translate authentication requirements into scalable engineering capabilities.
• Develop and communicate information security risk management policies and procedures in partnership with the CISO.
• Manage the organization's budget, manpower, and recruitment activities to ensure cost-effective operations.
• Oversee the continuous monitoring of cybersecurity activities and alert senior management to potential risks or inefficiencies.
• Represent the information security domain in discussions with external regulators regarding compliance and standards.

What we're looking for

• Bachelor's degree in Information Security, IT, Computer Science, Business Administration, Information Systems, or 4 years of relevant education and/or experience.
• 8 years of related information security experience in domains such as Cyber Security, IAM, Information Assurance, or Operational Risk Management.
• 3 years of direct team lead, supervisor, or management experience in an Information Security or Information Technology domain.
• 4 years of experience researching, designing, or implementing technology or cybersecurity solutions in a large financial institution or enterprise.
• Expert knowledge of regulations and standards including FFIEC, Gramm-Leach-Bliley, NIST Cybersecurity Framework, and PCI DSS.
• Strong knowledge of security technologies including cryptography, authentication, authorization, and controls.
• Demonstrated financial acumen involving budgets, forecasting, and executing on budgets for information security or technology support functions.
• Relevant certifications such as CISSP, CISM, SABSA, Microsoft Identity certifications, or equivalent (preferred).