Security Architect - Client and Workforce Identity (IAM)

Job description

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the [ATB ID](https://www.atb.com/company/careers/why-atb/our-values/)). Life at ATB is about more than work. In fact, we’re consistently recognized as one of [Canada's top employers](https://www.atb.com/company/careers/why-atb/) thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members: **Impact in action:** No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities. **Thrive together:** We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs. **Ready for tomorrow:** We want to enable your success through interesting and challenging work, performance enablement, and learning and development. ## About the role As ATB’s next **Security Architect - Client and Workforce Identity (IAM)**, you would be responsible for the design and maturity of client-facing and workforce identity and authentication practices within ATB. A successful candidate would be able to analyze complex problems, work with stakeholders in ATB as well as broader industry, lead discussions and improvements in cyber security practices, and directly contribute to the safe, secure and reliable operation of ATB information technology assets. ## Accountabilities - Develop identity solution architecture aligned with ATB policies and processes to secure ATB systems and data against threats; design, guide and recommend changes to security policies, standards and processes to help defend ATB assets, platforms, and tooling. - Advocate for progressing identity maturity, while balancing the needs of business stakeholders, technical and operational landscape, emerging practices, and industry developments. - This particular role would have a strong focus on client identity and related capabilities, such as authentication, identity management, identity verification, client experience, consent management, and fraud detection. - This role would also have a focus on workforce identity, including hardened authentication practices, core directory services, privileged access, non-human identity, extended authentication (including federation and extending core identity platforms), identity governance, and work towards phishing-resistance factors and passwordless adoption. - Work with stakeholders to develop strategy, roadmap, standards, patterns, and other documents in support of client or workforce identity capabilities. - Assist teams to address identified cyber security issues to protect against unauthorized data access, disclosure, or associated disruption. - Work collaboratively with CISO, security governance professionals, and other technology architects in the delivery of security services that have organization-wide impacts. - Design, advise, and implement appropriate security control mechanisms across ATB assets and platforms to ensure they are protected according to security policies. - Directly contribute to ATB projects with client authentication, including digital sales, client identity maturity, and authentication through multiple client engagement channels. - Continuously deploy best practices, implement new policies, and embrace emerging trends to strengthen our strategic architecture roadmap. - Lead proof of concept research and development in line with emerging industry trends. - Collaborate with the broader architecture team to embed security into architectural design, including advisory on appropriate security standards or controls. - Participate in the Cyber Security Incident Response Team for Cyber Security Incidents, as required. ## Skills, experience & requirements - General Skills: - Strong technical leadership and administration skills, with a demonstrated ability to lead change and solve problems. - Excellent communication and relationship-building skills, with a demonstrated ability to work effectively within both the business and technical arenas. - Well-developed analytical skills accompanied by proven decision-making experience. - Demonstrated aptitude for continuous learning and innovative thinking. - Excellent verbal and written communication skills, including polished presentation skills with the ability to deliver technical issues to both technical and non-technical audiences in a clear and understandable manner. - Ability to weigh several, often conflicting constraints and make rapid decisions in a dynamic environment. - Technical Skills: - Technical cyber security background, with experience in system design, architecture, technology deployment, and security monitoring. - Experience with Identity & Access Management capabilities, including single sign on experiences, client identity, authentication, identity verification, and multi-factor authentication. - Working knowledge of identity platforms, such as Okta or Ping Identity. - Understanding of non-human identity best practices for use with AI and process automation workflows. - Experience designing High-Availability or High Traffic infrastructure with working knowledge of cloud services (cloud orchestration, multi-cluster, hybrid and multi modal). - Experience with leading security design and analysis tasks. - Cloud security experience required; Google Cloud Platform preferred. - Minimum of seven years of experience within the Information Technology industry; career focus in cyber security, architecture, or equivalent development or operational experience. - Formal information technology education, including a post-secondary degree or diploma. - Professional designation preferred, ex: CISSP, CCSP, or CISM. - Previous financial industry experience would be an asset. ## Additional Details This position has a **hybrid work arrangement**. On average, this means 1 day on-site per week. Please note that this is subject to change due to business priorities. **Don’t meet all the requirements on the list?** A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes—we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you’re seeking a career where your drive, perspective and growth are celebrated, we want to hear from you. We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the [Partnership Accreditation in Indigenous Relations](http://www.atb.com/company/community/indigenous-relations/?utm_source=offline&utm_medium=redirect&utm_campaign=indigenous+relations) program created by the Canadian Council for Aboriginal Business. **What happens next?** If you are shortlisted, you’ll hear from us after the posting closes. Check out our [How We Hire](https://www.atb.com/company/careers/how-we-hire/) page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at [talentteam@atb.com](mailto:talentteam@atb.com) **Stay in touch** We’re excited that you’re interested in a career with ATB. Follow us on [LinkedIn](https://www.linkedin.com/company/atb-financial/?viewAsMember=true), [Facebook](https://www.facebook.com/ATBFinancial/) and [Instagram](https://www.instagram.com/atbfinancial/?hl=en) to learn more about what our team is up to.