
Purpose of the role
To develop, implement and maintain solutions that support the safeguarding of the banks systems and sensitive information.
Accountabilities
Vice President Expectations
All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.
Join us as a Security Engineer- Identity Access Management. You will be bringing to life a new digital platform capability, transforming, and modernising our digital estate to build a market-leading digital offering with customer experience at its heart. You will be partnering with business aligned engineering and product teams, to ensure a collaborative team culture is at the heart of what we do.
To be successful in this role you should have:
• Hands-on IAM (Identity Access Management) engineer background with broad expertise across the IAM (Identity Access Management) domain, including tooling, products, protocols, taxonomy, identity management, authentication, authorization, and identity federation.
• Experience with single sign on, OAuth2, OIDC, PKI, PSD2 SCA knowledge and possession-based authentication.
• Experience with ForgeRock developer experience with Ping Gateway, Ping AM, Ping IDM, and Ping DS, including JavaScript coding of Ping Gateway scripted routes, and Ping AM authentication tree nodes is an advantage.
• Strong hands-on coding across either JavaScript or Java, and you must be comfortable in designing extensible IAM APIs for seamless integration with external and internal applications.
• Working knowledge of implementing Ping AM custom authentication trees, including downstream API integration with threat sensors (Threat Metrix, Bio Catch, etc.), adaptive authentication and step-up authentication, including the ability to implement data links between internal and external LDAPS, JDBC, SOAP, HTTPS, and other data sources.
Some other highly desirable skills include:
• Experience in implementing Ping Gateway single-sign-on routes, dynamic proxies and filter chains, or implementing Ping IDM based data links.
• Experience in partnering with security, product, engineering, and compliance teams, to embed identity-first principles into the DevSecOps lifecycle.
You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills.
This role will be based out of our Pune office.

Barclays is a British universal bank. Our vision is to be the UK-centred leader in global finance. We are a diversified bank with comprehensive UK consumer, corporate and wealth and private banking franchises, a leading investment bank and a strong, specialist US consumer bank. Through these five divisions, we are working together for a better financial future for our customers, clients and communities.
With over 325 years of history and expertise in banking, Barclays operates in over 40 countries and employs approximately 83,500 people. Barclays moves, lends, invests and protects money for customers and clients worldwide.
Barclays is a trading name of Barclays Bank PLC and its subsidiaries. Barclays Bank PLC is registered in England and is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Registered in England. Registered No. 1026167. Registered office: 1 Churchill Place, London E14 5HP.