The Engineering Lead Analyst is a senior level position responsible for leading a variety of engineering activities including the design, acquisition and deployment of hardware, software and network infrastructure in coordination with the privileged account management space. This is an emerging space which addresses the core issues of controlling access and managing the life cycle of accounts that have elevated privileges.  The footprint of the number of accounts under management is continuously growing and it is the responsibility of the team to ensure that it rises to the challenge and ensure that we can establish a balance between security and operational needs of the firm
Responsibilities:
• Serve as a technology subject matter expert for internal and external stakeholders and provide direction for all firm mandated controls and compliance initiatives, all projects within the group and in creating a technology domain roadmap
• Work with operational product owners and various peer teams to integrate Secure Password Vaulting systems and related technologies with other Citi platforms to protect and manage the credentials of mission critical systems. (Privileged accounts used by applications and users aka functional accounts)
• Write scripts or code that will help with customization of the PIM products.  The scripting and coding will involve (but not limited to) shell scripting, perl, java, .net.
• Perform product evaluation, testing and certification of such secure vaulting systems. This involves system architectural design and subject matter expertise
• Ensure that all PIM security products meet or exceed Citi internal and regulatory requirements.
• Provide third level support toolset (meaning engineering support and not operational).
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in the development of all security tools related to vaulting services.
• Work with the vendor to identify product flaws and future enhancement suggestions
• Ensure that all integration of functions meet business goals
• Define necessary system enhancements to deploy new products and process enhancements
• Recommend product customization for system integration
• Identify problem causality, business impact and root causes
• Exhibit knowledge of how own specialty area contributes to the business and apply knowledge of competitors, products and services
• Advise or mentor junior team members
• Impact the engineering function by influencing decisions through advice, counsel or facilitating services
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
Qualifications:
• Bachelor’s degree/University degree or equivalent experience
• CISSP preferred
• 6+ years of relevant experience in an Engineering role
• Password/Credential vaulting technologies
• Required (expert level) : Cyberark suite of products PAS, PSM, AAM (formerly AIM), DAP (formerly Conjur)
• Optional: OneIdentity  TPAM
• Windows operating systems (Windows System Administration skills preferred)
• Unix Operating Systems, specifically RHEL (moderate to expert level)
• Scripting languages (moderate to expert level) : PowerShell, T-SQL, SQL,PLSQL, Unix shell, Perl, RPM or other packaging mechanisms
• Database (moderate to expert level):  Oracle, Mongo, Microsoft SQL
• High Level Coding Languages (moderate to expert level): Java, Dot Net.
• Access Management products and solutions preferred
• Directory Servers
• Ping Access/Federation
• Encryption algorithms, PKI and peripheral technologies
• Overall experience in all aspects of IAM is strongly recommended (especially understanding of roles, JEA and JIT concepts)
• Understanding of Public cloud (AWS,GCP,Azure) preferred
• Understanding of Openshift container Orchestration preferred
• Jira and Confluence preferred
• Experience working in Financial Services or a large complex and/or global environment
• Project Management experience
• Consistently demonstrates clear and concise written and verbal communication
• Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
• Demonstrated analytic/diagnostic skills
• Ability to work in a matrix environment and partner with virtual teams
• Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
• Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
• Proven track record of operational process change and improvement
• Understand Product and Software development/engineering life cycle processes
• Must be methodic and document effectively.
• Customer focus
• Aptitude for innovation and troubleshooting
• Understand and adopt beneficial industry trends
• Be receptive to a global work environment
-------------------------------------------------
Job Family Group:
Technology
-------------------------------------------------
Job Family:
Systems & Engineering
------------------------------------------------------
Time Type:
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting