At American Express, the business problem is to architect and engineer data access security controls that manage, monitor, measure, and report the data access security posture of the organization’s data estate, specifically controlling access to semi-structured and unstructured data hosted on distributed servers, cloud, storage, file systems, file shares and collaboration repositories.
Requirements
- Strong expertise in Java (Spring Boot, REST API)
- Development experience with Node, React, Java/J2EE, Restful Webservices
- Experience in cloud deployment in a continuous integration, and continuous delivery model (CI/CD).
- Experience with CSS, HTML, JavaScript, and similar UI frameworks (jQuery, React Angular)
- Experience working with containers and microservices in the cloud.
- SQL Proficiency: Writing complex queries, joins, stored procedures, functions, and triggers.
- Experience using Microsoft Graph data connect
Responsibilities
- Automate discovery and remediation of excess permissions in M365 and other unstructured data platforms.
- Develop custom scripts and automation workflows for deprovisioning access based on leavers or transfer events, and usage inactivity.
- Manage and make enhancements to access attestation portal
- Implement automated solutions to initiate access reviews for high risk items.
- Implement solutions to monitor and remediate access anomalies and policy violations.
- Deploy workflows to aggregate permissions from unstructured data platforms through APIs.
- Perform data analysis and reporting as needed.
Other
- Bachelor’s Degree in Computer Science, Information Security (or equivalent work experience)
- 4+ Years of hands-on experience.
- Shares critical expertise and knowledge to support team
- Uses breakthrough thinking to generate insights, alternatives and opportunities to prevent attacks
- Communications
- Teamwork
