Information Security Engineer II-2

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Information Security Engineer II-2Overview
The Modern Access Identity Integration engineering team is seeking a skilled Information Security Engineer with 2-3 years of hands-on experience in Saviynt, Azure Entra, and/or AWS Identity and Access Management (IAM) solutions. This role will focus on managing IAM solutions, ensuring that the organization’s user identities, access controls, and security policies are effectively governed. As a Security Engineer, you will collaborate with security, IT, and compliance teams to ensure a robust, scalable, and secure identity management system.

In this role you will:
• Help Mastercard to modernize Identity and Access Management, with focus on Saviynt Identity Governance and Administration (IGA) solution, including user provisioning, role management, access certification, and entitlement management.
• Ensure that access is appropriately handled when all identity lifecycle events (e.g., Joiner, Mover, Leaver) occur.
• Design and implement IAM solutions to support hybrid cloud environments (on-premises + cloud) while ensuring strong security controls and compliance.
• Improve procedures and feature sets on how Identity and Access Management is handled in the cloud and for our subsidiaries. This will include a combination of various environments, many of which are outside our traditional data center.
• Produce end user documentation for internal teams on how to take advantage of services as it relates to Identity and Access Management.
• Facilitate and support access reviews, ensuring that compliance requirements are met, and end-user friction is mitigated. Also support audit requests to provide evidence that controls are in place related to access reviews.
• Evangelize these services to the rest of the enterprise and drive change by fostering enthusiasm for modern Identity governance.
• Review and produce project documentation, including maintaining technical documents and business requirements.
• Be an advocate for our end users and application owners to ensure that the Identity products the team manages are exceeding expectations.
• Provide training to major stakeholders on the products the team manages to establish business as usual processes and provide clear expectations.
• Develop and report on important key performance indicators or metrics that demonstrate value to the organization for the products that the team manages.
• Responsible for operationally supporting the tools and platforms the Modern Access team supports.
• Responsible for ensuring change control and incident management processes and procedures are followed as per Mastercard standards.

All About You

The ideal candidate for this position should have:
• An appreciation and clear mission for how users interact with Mastercard’s governance platform for the cloud and on premise, focusing on the customer journey and balancing security with a user-friendly design.
• Skills in Powershell.
• Intermediate skills in Azure Active Directory and/or Amazon Web Services (AWS).
• Knowledge of Identity and Access Management concepts.
• Experience in implementing modern Identity Governance and Administration platforms, such as Sailpoint or Saviynt.
• Knowledge and understanding of zero trust and the Identity pillar.
• Have knowledge and experience supporting API configuration as well as familiarity with standard identity and authentication protocols such as SAML, OpenID Connect, and SCIM
• Participate on project teams, collaborate with business partners, vendor/ consulting organizations and peer level professionals from other IT disciplines.
• Information Security Engineering experience in Identity and Access concepts and fundamentals
• Successful track record in moving modern authentication services forward to keep up with the ever-changing technology & security landscape.
• Understanding of security concepts and their application. This can be evidenced through certifications such as Security+, CISSP, and CIAM.
• National Initiative for Cybersecurity Education (NICE) competency proficiency levels of advanced in leadership, operational, and professional, to advanced and expert in technical.
• This Mastercard role shares KSAs with related NICE work roles
o SP-ARC-002, OPM652, Security Architect
o SP-TRD-001, OPM661, Research & Development Specialist
o SP-SRP-001, OPM641, Systems Requirements Planner
o OV-SPP-002, OPM751, Cyber Policy and Strategy Planner

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.