Sr. Security Engineer II

• Oversee IAM operations, incidence investigation, problem resolution and technical consultation. Provide technical oversight of IAM team to grow their knowhow through mentoring and coaching.

• Develop operation specifications for new IAM services, applications and service offerings

• Work with IAM architecture (integrated process, applications, data and technology) team to solve business problems in alignment with the current standards

• Work with IAM architecture and development Team to build enterprise-wide custom integration solutions w/ applications, services and processes that drive business results ensuring all Yum Security Standards.

• Participate in cross functional project planning activities to ensure project success and security and recovery of critical systems.

• Lead research of Identity and Access Management (IAM) Systems, Single-Sign-On and Authentication Technologies which lead to higher productivity and easier secure access to Yum’s global digital assets. Assets include information, desktops, servers, web services, applications, contracts and mobile devices.

• Develop a global 1-3 year road map for Identity and Access Management for in-store, above store, and consumer facing technologies.

• Ensure development of secure application and authentication standards to enable Yum’s digital growth initiatives in both web based and mobile platforms.

• Research and evaluate new security solutions, including lab tests, proof of concepts and pilots. Make operational and technology recommendations which influence Yum’s global operations.

Provide leadership to brand and Cybersecurity division- IAM

EXPERIENCE (and other qualifications):

• IAM Subject Matter Expertise with at least 10 - 14 years on operations, implementation and development experience integrating security solution w/ business application and processes.

• Minimum of 5 years leading technical teams with responsibility for Global IAM operations

• A deep understanding of Identity and Access Management Architecture and Operations is required.

  • Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.

  • Knowledge of Web Services Architecture required.

  • Knowledge of SSO and Federation required.

  • Knowledge of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.

• Detailed familiarity with ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development

• Detailed familiarity with ISAM and Ping Federation Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access

• A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.

• Strong knowledge of Internet technologies and XML integration, including XML-Schema, XML-RPC, XML-SOAP, and/or Web Services/SOA

• Detailed familiarity with JSP/Servlets, SPML, DAML, JNDI, DSMLv2, LDIF, LDAP, ODBC, JDBC, JMS, JAAS, ISIM APIs

• Excellent written and oral communication skills with experience influencing Sr. Leaders and C-level executives.

Preferred (but not required):

• ISIM Certified Deployment Professional

• ISAM Certified Deployment Professional

Experience dealing with international locations and cultures. A plus

EDUCATION:

BE-BTECH degree, Certified Information Systems Security Professional (CISSP) a plus.