PGIM
Lead, Infrastructure Security Engineer - IAM and Cloud
PGIM, Newark, NJ
Job Classification:Technology - Engineering & CloudAre you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.Your Team & RoleAs a Lead Infrastructure Security Engineer on the Global Technology IAM Team, you will partner with product owners, tech leads, designers, engineers and delivery professionals to architect, develop and improve IAM solutions. You will code, test and debug new and existing applications as you implement capabilities to solve sophisticated business problems, deploy innovative products, services and experiences to delight our customers! In addition to advanced technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do. Here is What You Can Expect on a Typical Day • Collaborate with product owners in understanding needs and defining features, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact.• Collaborate with Enterprise Architects and ISO to enhance the IAM vision, ensuring alignment with the EA standards and ISO policies.• Lead the design, implementation, and management of IAM services capabilities and services for customer and workforce facing solutions.• Develop and enforce security policies, standards, and best practices, while collaborating with cross-functional teams to integrate security into enterprise applications & automation.• Build applications ensuring that the code follows latest coding practices and industry standards, using modern design patterns and architectural principles; remove technical impediments • Develop high quality, well documented and efficient code adhering to all applicable Prudential standards.• Innovating, designing, and building DevOps solutions for the enterprise. Drive continuous quality by integrating code quality, security, and automated testing capabilities; remove technical impediments.• Write unit, integration tests and functional automation, researching problems discovered by quality assurance or product support, developing solutions to address the problems • Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day • Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables. • Use programming languages including but not limited to Python, Java, or JavaScript and React, SpringBoot, Node.js frameworks The Skills & Expertise You Bring • Bachelor of Computer Science or Engineering or experience in related fields.• Certified AWS Certified Security – Specialty.• Certified AWS DevOps Professional.• Certified AWS Certified Solutions Architect Professional.• Experience in DevSecOps practices and integrating security into CI/CD pipelines.• Experience in conducting security architecture reviews and providing recommendations for improvements.• Profound understanding of web-based technologies including multi-tier applications and security standards (HTTP, TLS, REST/SOAP, Cookie Handling, SAML, OAUTH, OIDC, …)• Knowledge of security orchestration, automation, and response (SOAR) tools.• Ability to coach others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization.• Experience standing up production grade infrastructure in AWS involving AWS EKS, ECS Fargate, Secrets Manager and CloudWatch using IaaS code practices.• Experience deploying Java Spring Boot apps to AWS EKS and ECS.• Experience integrating quality and security tools in the CI/CD pipelines like SonarQube and CheckMarx.• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business.• Experience with agile development methodologies and Test-Driven Development (TDD)• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business.• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges.• Excellent problem solving, communication and collaboration skills• Advanced experience and/or expertise with several of the following:Software security skills including secure coding, web application security and DevSecOps; Solid grasp of security concepts (authentication, authorization, encryption, digital signature, JWT), SSL, web service proxies, firewall, SAML 2.0, OpenID Connect, OAuth 2.0)IAM expertise specifically with ForgeRock Identity Cloud (PingOne AIC), SiteMinder, AzureDev Ops Tools & Practices: DevOps automation tools, practices & capabilities, continuous integration & continuous delivery.DevOps Platform: Industry standard CI/CD solutions, platforms and tools (Jenkins, Atlassian, Sonar, Artifactory, CheckMarx etc.) to support lifecycle capabilities. Experience/knowledge in build frameworks like Maven, Gradle, Nuget, NPM.Programming Languages: Python, Java, and Java Script; working in distributed systems, object-oriented programming, design patterns and design methodology; JAVA services using Spring CLI, Maven, Microservice, multi-threading, Concurrency and parallel processing.AWS Core Services: AWS Services such as ECS, Secrets Manager, API-Gateway, CloudWatch etc.Frameworks: SpringBoot, Node.js, such as Full / MEAN / MERN stackData Store: NoSQL or Relational Data structures; MongoDB BPM toolsData Streaming: SQS, KinesisApplication Programming Interfaces (API): Consumption & Development; implementing service-oriented architecture (SOA) patterns; Web service technologies such as APIs, REST, JSON, SOAP, XML, JDBC, MySQLUnit, interface and end user testing concepts and tooling (functional & non-functional)Automated testingAccessibility awarenessSoftware Development Life Cycle (SDLC): Monitoring and logging techniques• Preferred Qualifications:9+ years Software development & Engineering experience.5+ years of experience in designing, implementing, and supporting IAM and SSO solutions.7+ years of experience with AWS Services like AWS EKS, ECS Fargate, Secrets Manager, CloudWatch etc.5+ years of experience using CI/CD and DevOps tools such as Jenkins, Sonar, Artifactory, CheckMarx etc.Certified AWS Certified Security – Specialty.Certified AWS DevOps Professional.Certified AWS Certified Solutions Architect Professional.Architecture Patterns.Design Thinking.Financial/Insurance industry experience is a plus, not a must.You’ll Love Working Here Because You CanJoin a team and culture where your voice matters; where every day, your work transforms our experiences to make lives better. As you put your skills to use, we’ll help you make an even bigger impact with learning experiences that can grow your technical AND leadership capabilities. You’ll be surprised by what this rock-solid organization has in store for you.What we offer you:Market competitive base salaries, with a yearly bonus potential at every levelMedical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leaveRetirement plans:401(k) plan with company match (up to 4%)Company-funded pension planWellness Programs to help you achieve your wellbeing goals, including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needsWork/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.Tuition Assistance to help finance traditional college enrollment toward obtaining an approved degree, many accredited certificate programs, and industry designations.Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service. Note: Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $135,100.00 to $201,000.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills. Roles may also be eligible for additional compensation and/or benefits. Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. In addition, employees are eligible for standard benefits package including paid time off, medical, dental and retirement.Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.Prudential is a multinational financial services leader with operations in the United States, Asia, Europe, and Latin America. Leveraging its heritage of life insurance and asset management expertise, Prudential is focused on helping individual and institutional customers grow and protect their wealth. The company's well-known Rock symbol is an icon of strength, stability, expertise and innovation that has stood the test of time. Prudential's businesses offer a variety of products and services, including life insurance, annuities, retirement-related services, mutual funds, asset management, and real estate services.We recognize that our strength and success are directly linked to the quality and skills of our diverse associates. We are proud to be a place where talented people who want to make a difference can grow as professionals, leaders, and as individuals. Visit to learn more about our values, our history and our brand.Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status , medical condition or any other characteristic protected by law. The Prudential Insurance Company of America, Newark, NJ and its affiliates.Note that this posting is intended for individual applicants. Search firms or agencies should email Staffing at staffingagencies@prudential.com for more information about doing business with Prudential.PEOPLE WITH DISABILITIES:If you need an accommodation to complete the application process, which may include an assessment, please email accommodations.hw@prudential.com.Please note that the above email is solely for individuals with disabilities requesting an accommodation. If you are experiencing a technical issue with your application or an assessment, please email careers.technicalsupport@prudential.com to request assistance.SummaryLocation: Newark, NJ, USAType: Full time