About BNP Paribas India Solutions:
Established in 2005, BNP Paribas India Solutions is a wholly owned subsidiary of BNP Paribas SA, European Union's leading bank with an international reach. With delivery centers located in Bengaluru, Chennai and Mumbai, we are a 24x7 global delivery center. India Solutions services three business lines: Corporate and Institutional Banking, Investment Solutions and Retail Banking for BNP Paribas across the Group. Driving innovation and growth, we are harnessing the potential of over 10000 employees, to provide support and develop best-in-class solutions.
About BNP Paribas Group:
BNP Paribas is the European Union's leading bank and key player in international banking. It operates in 65 countries and has nearly 185,000 employees, including more than 145,000 in Europe. The Group has key positions in its three main fields of activity: Commercial, Personal Banking & Services for the Group's commercial & personal banking and several specialised businesses including BNP Paribas Personal Finance and Arval; Investment & Protection Services for savings, investment, and protection solutions; and Corporate & Institutional Banking, focused on corporate and institutional clients. Based on its strong diversified and integrated model, the Group helps all its clients (individuals, community associations, entrepreneurs, SMEs, corporates and institutional clients) to realize their projects through solutions spanning financing, investment, savings and protection insurance. In Europe, BNP Paribas has four domestic markets: Belgium, France, Italy, and Luxembourg. The Group is rolling out its integrated commercial & personal banking model across several Mediterranean countries, Turkey, and Eastern Europe. As a key player in international banking, the Group has leading platforms and business lines in Europe, a strong presence in the Americas as well as a solid and fast-growing business in Asia-Pacific. BNP Paribas has implemented a Corporate Social Responsibility approach in all its activities, enabling it to contribute to the construction of a sustainable future, while ensuring the Group's performance and stability
Commitment to Diversity and Inclusion
At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.
About Business line/Function:
BNP Paribas IT teams are providing infrastructure, development and production support services to all applications used worldwide by all business lines. There is a great variety of technologies and infrastructures from legacy systems to cutting edge Cloud technologies.
Within BNP Paribas Group IT, the filiere FORTIS oversees operationally to the challenges of IT applications with an end-to-end vision and consistently across the Bank. Several domains of these filiere contribute to this, including the domain Service Offering DevOps, which provides the DevSecOps platform for IT Group, Control Center, DB Activities and move to Cloud project.
BNP Paribas Fortis is a bank that is responsible and socially committed. The environment, diversity, cultural support, sponsorship... Through various and concrete ways, we are dedicated to meeting our customers expectations and proud to demonstrate our values: responsible, human, innovative and enthusiastic.
Job Title:
Web Security and Authentication Engineer
Date:
May 2024
Department:
BNPP ITG
Location:
Chennai
Business Line / Function:
FORTIS
Reports to:
(Direct)
BNPP
Grade:
(if applicable)
(Functional)
ITGP/FORTIS
Number of Direct Reports:
Directorship / Registration:
NA
Position Purpose
The Web Security and Authentication squads within IT Middleware Services Tribe will work together with the existing Web Infrastructure Tooling & Hosting, Web Design and Secure Gateways squads for the technical design, installation, set-up, industrialization, management, support and documentation of the BNP Paribas Fortis Web Security Infrastructure
BNP Paribas Fortis needs Web Security Engineers to enforce the Web Securitization and Authentication squad.
Responsibilities
Direct Responsibilities
The mission has different aspects:
- Design, deliver and support the integration layer between operating systems and business applications within distributed environments for Web information exchange solutions.
- Focuses on the integration of web applications in the Web Infrastructure, for the intranet as well as for the DMZ.
- Deploy and maintain a consistent and complex Web site infrastructure
- Help to identify, recommend, and prioritize new Web features in conjunction with application developers and architects.
- Ability to challenge new and existing solutions, architectures and defend it towards the interest of the bank (maintenance, costs, security,)
- Identify reusable components required for Web Security and ensure the high quality of the service.
- Share knowledge with colleagues on technology subjects, solutions, best practices on vendor specific and also on generic security components
Contributing Responsibilities
- Establish and document installations, guidelines, policies and procedures for relevant stakeholders.
- Assist architects in order to perform cost-benefit analyses of proposed Web implementations, enhancements, and modifications.
- Active participation in production support (incident, problem and change management) for the Web Security squad.
- Set and enforce compatibility and interoperability standards that ensure site accessibility for all users.
- Monitor and report on Web site traffic and performance.
- Participate in the automation and industrialization of our assets
- Participate in the On-Call calendar (7/7 from 18:00 7:30)
- Work on-site (3-4 days)
Technical & Behavioral Competencies
Mandatory Skills
- Proven experience with reverse proxies, Webseal, ISVA or similar
- Proven experience with following Web technologies:
- TAMeB
- ISAM/ISVA (as from version 9and modules: AAC, Infomap, Federation)
- Good and proven knowledge on: Web access management, Web authentication practices, SSL/TLS( and mutual auth.), SSO, Identity Federation, PKI, certificates, OpenID Connect, OAuth 2.0, SAML 2.0, External Authentication Interface on WebSEAL
- Practical knowledge of Oauth and OIDC protocols
- Strong coding experience : Java, Python; Javascript server side (Rhino JS) are example of used languages & Ability to understand and translate existing code sources
- Good knowledge on: XML/XSLT
- Generic knowledge on: firewalls, application firewalls, load balancers, networks, DMZ, network security, anti-virus
- Knowledge in web and application servers including Apache and Websphere,
Experience with support on e-Commerce, intranet and extranet development
Good To Have Skills
- Security Token Service (STS) and/or TFIM experience + SOAP and WS-Trust knowledge
- Recent successful proven experience in similar/comparable scope
- Strong experience in security of Web Infrastructure in financial services
- Basic Shell scripting (automation of curl commands i.e)
- Familiar with DevOps methodologies and container technologies such as Docker
- Familiar with an agile environment
- Demonstrated team player with strong and effective customer care skills.
- Quick self-starter, pro-active and innovative attitude.
- Open minded and show flexibility in self-learning new technologies/tools.
- Good analytical and synthesis skills.
- Process-oriented with high attention to detail.
- Effective oral and written communicator to both management and technical staff
- Autonomy, commitment, and perseverance.
- Ability to work in a dynamic and multicultural environment.
- Flexibility (in peak periods extra efforts may be required).
- Stress resistant
Skills Referential
Specific Qualifications (if required)
Behavioural Skills: (Please select up to 4 skills)
Ability to collaborate / Teamwork
Attention to detail / rigor
Ability to synthetize / simplify
Communication skills - oral & written
Transversal Skills: (Please select up to 5 skills)
Analytical Ability
Ability to set up relevant performance indicators
Ability to develop and leverage networks
Ability To Develop Others & Improve Their Skills
Choose an item.
Education Level:
Master Degree or equivalent
Experience Level
At least 7 years
Other/Specific Qualifications (if Required)
NA
Primary Location
IN-MH-Mumbai
Job Type
Standard / Permanent
Job
INFORMATION TECHNOLOGY
Education Level
Bachelor Degree or equivalent ( = 3 years)
Experience Level
At least 7 years
Schedule
Full-time
