IT Security Engineer - Multi-Factor Authentication (MFA)

Tasks

• Design, implementation, and operation of identity and access management (IAM) solutions, identity and access governance, and lifecycle automation
• Monitoring of the entire IT lifecycle of SmartSecure, including procurement, reservation, innovation, and decommissioning
• Management of integrations between SmartSecure and Veridium with core identity providers such as Microsoft Entra ID (Azure AD) and Active Directory Federation Services (ADFS)
• Leading incident response measures for real-time authentication issues and participating in incident response activities
• Ensuring full compliance of all IAM platforms with information security policies, standards, frameworks, guidelines, monitoring, logging, and threat prevention
• Preparation of authorization and technical documentation for Confidence, including system architectures, operating procedures, integration specifications, and post-incident reviews
• Continuous improvement of services by increasing system stability, security, performance, availability, and automation
• Tracking advances in authentication technologies and creating strategic roadmaps for integrating secure, future-proof solutions into the bank's identity and access infrastructure

Requirements

Professional and technical

• Expertise in multi-factor authentication (MFA) technologies with practical experience in managing SmartSecure (PingID/PAM) and Veridium or similar security solutions
• Basic understanding of authentication standards and practices, including GAUTH 2.0, OpenID Connect, SAML, FIDO2/ROCA, and certificate-based authentication
• Experience integrating MFA solutions with identity providers such as Microsoft Entra ID (Azure AD), ADFS, or equivalent federated identity systems
• Practical understanding of ITIL processes, including digital certificate lifecycle management, trust labs, CKA/OCSP, and integration with endpoint authentication

Personal and social

• Team player with a strong willingness to cooperate and the ability to take on responsibility
• Excellent verbal and written communication skills
• Strong focus on delivery and results orientation
• Ability to make independent decisions, including prioritizing and resolving incidents and change requests
• Strong analytical and conceptual thinking skills with attention to detail and long-term architectural implications

Regulatory

• Good understanding of the technology regulatory framework in Singapore and Hong Kong

We offer