Cloud IAM Build Specialist (US)

Company Overview

About TD Bank, America's Most Convenient Bank®

TD Bank, America's Most Convenient Bank, is one of the 10 largest banks in the U.S., providing over 9.8 million customers with a full range of retail, small business and commercial banking products and services at more than 1,100 convenient locations throughout the Northeast, Mid-Atlantic, Metro D.C., the Carolinas and Florida. In addition, TD Auto Finance, a division of TD Bank, N.A., offers vehicle financing and dealer commercial services. TD Bank and its subsidiaries also offer customized private banking and wealth management services through TD Wealth®. TD Bank is headquartered in Cherry Hill, N.J. To learn more, visit www.td.com/us. Find TD Bank on Facebook at www.facebook.com/TDBank and on Twitter at www.twitter.com/TDBank_US and www.twitter.com/TDNews_US.

TD Bank, America's Most Convenient Bank, is a member of TD Bank Group and a subsidiary of The Toronto-Dominion Bank of Toronto, Canada, a top 10 financial services company in North America. The Toronto-Dominion Bank trades on the New York and Toronto stock exchanges under the ticker symbol "TD". To learn more, visit www.td.com.

We offer a competitive salary and benefit program, including: comprehensive, affordable health care through medical, dental, and vision coverage; financial security with life and disability insurance; opportunities to save using health savings and flexible spending accounts; retirement benefits to help prepare for the future; paid time off and work/life benefits to maintain a good balance.

Department Overview

We are looking for an experienced Cloud resource familiar with managing and deploying Identity and Access Management configuration in various cloud environments. The ideal candidate will have IAM related experience with Azure, Amazon Web Services, and Google Cloud - working knowledge or experience with standard DevOps practices and tooling - and experience with standard Enterprise identity platforms working in a hybrid model with the cloud.

Responsibilities:

• Coordinate execution and deployment of IAM configuration on our Azure AD and Compute platforms, Office 365, AWS, GCP, and other SaaS Services.
• Maintain configuration and currency for the Azure AD Connect Sync Service
• Validate and Action Microsoft Message Center alerts as required to ensure TD's Azure environment is maintained properly.
• Participate in an IAM intake queue, vetting and processing requests for Cloud configuration changes, application integrations, and other Cloud IAM tasks.
• Coordinate with Cloud IAM Engineering team to participate in project related changes when required.
• Respond to security alerts and events generated for identity related items in TD's cloud environments.
• Serve as an escalation point for IAM operations teams when required.

Job Requirements

• Undergraduate degree or Technical Certificate
• Graduate degree, preferred
• 7+ years relevant experience

Job Details

Depth & Scope:

• Primary subject matter expert in multiple areas and consults with clients/or project teams with respect to all aspects of operational support / solutions
• Works independently and/or autonomously as a senior/ lead on a diverse range of tasks / operational support of solutions and is relied upon to coach/ educate others
• Assignments are highly complex and multifaceted
• May monitor, coach/ educate a small team of IT professionals
• Acts as a key resource in the exchange of technical information for project teams, the business and/or outside vendors

Inclusiveness

At TD, we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected and supported. We are dedicated to building a workforce that reflects the diversity of our customers and communities in which we live in and serve, and creating an environment where every employee has the opportunity to reach their potential.

If you are a candidate with a disability and need an accommodation to complete the application process, email the TD Bank US Workplace Accommodations Program at [email protected] . Include your full name, best way to reach you, and the accommodation needed to assist you with the application process.

EOE/Minorities/Females/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity.

Qualifications

Preferred Qualifications - Here are the preferred qualifications for this role:

• Experience working with the Microsoft Azure platform and services
• Experience in core Azure IAM technologies including Azure AD Connect, Conditional Access, MFA, Azure AD Directory Roles, Azure PIM, Azure Subscription RBAC, and Access Policies for major Azure Services.
• Working knowledge of:
  • Authentication and Authorization protocols, both modern (SAML, OAuth, OIDC) and legacy (NTLM, Kerberos, basic)
  • Azure technologies like Azure Policy & Blueprints, Graph API, Azure Resource Management, Azure AD Health, Azure Security Center, etc.
  • IAM Integration and management in Amazon Web Services
  • IAM configuration and management with Google Cloud Identity
  • CICD framework and common DevOps tools and technologies used for orchestration, automated configuration, containers and container orchestration. Hands-on experience with tools like Jenkins, SALT, Kubernetes, Docker, etc. is a plus
  • Scripting and Automation experience using native Azure CLI, PowerShell, and/or Python.

• Experience in information technology with hands-on experience as an individual contributor in Cloud projects
• Ability to participate in fast-paced cloud environment and within Scrum agile processes
• Strong academic background (e.g., computer science, information technology)
• Strong preference for Certified Professionals with relevant Cloud Certifications
• Systems management experience with Active Directory, ActiveRoles Server, and any federation service is beneficial