Lead CIAM Engineer

Job Family IT - General About Us At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment — one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there. Who We Are We believe everyone deserves to live their best life. More than a century ago, we were among the first financial services companies in America to serve everyday people from all walks of life. Today, we're part of an international holding company, with millions of customers and thousands of employees worldwide. Our insurance, retirement, and investment solutions help people make the most of what's important to them. We're empowered by a vast agent network covering North America, with diversity to match. Together with our nonprofit research institute and foundation, we tune in, step up, and are a force for good — for our customers and the communities where we live, work, and play. United in our purpose, we help people create the financial freedom to live life on their terms. What We Do Transamerica is organized into three distinct businesses. These include 1) World Financial Group, including Transamerica Financial Advisors, 2) Protection Solutions and Savings & Investments, comprised of life insurance, annuities, employee benefits, retirement plans, and Transamerica Investment Solutions, and 3) Financial Assets, which includes legacy blocks of long term care, universal life, and variable and fixed annuities. These are supported by Transamerica Corporate, which includes Finance, People and Places, General Counsel, Risk, Internal Audit, Strategy and Development, and Corporate Affairs, which covers Communications, Brand, and Government and Policy Affairs. Transamerica employs nearly 7,000 people. It's part of Aegon, an integrated, diversified, international financial services group serving approximately 23.9 million customers worldwide.• For more information, visit transamerica.com. Job Description Summary The Lead CIAM Engineer will be responsible for consulting with various groups to plan, architect and implement standards-based solutions in the areas of general identity management, directory, and security. Provides administrative support for several infrastructures related to web applications, identity management and the components surrounding these technologies Specifically IBM Security Access Manager and Okta. These include areas such as SharePoint, WebSphere, IIS, Tomcat, Apache, EpiServer, Proxy Internet Access, Oracle Access Manager, CMS Systems, Federation Services, Monitoring and F5 Content Switches. Also has responsibilities for Internet security, integration of 3rd party applications, domain name / SSL certificate administration and documentation. Job Description Responsibilities Direct responsibilities on the operational team for developing and maintaining integrated strategies and solutions, with a focus on Web Access Management services for the Global Aegon environment. Web Access Management services include the following core technologies: Okta, Ping, IBM ISAM, and Federation Services. Identify opportunities for using Web Access Management to leverage single sign on security with an emphasis on cost containment/reduction strategies. Provide effective project management and feasibility analysis on potential future projects. Support and provide guidance on Web Access Management Systems applications and Integrations. Provide documentation highlighting integration, design and SSO features of solutions. Provide technical leadership, guidance, and architectural planning for internal/external customer engagements. Assist in automation and building repeatable patterns for consumption. Perform day to day operations to maintain SLAs and business functions Runs small to large enterprise infrastructure projects from requirements gathering to post-implementation. Optimizes the performance and availability of the Web Services environment through monitoring, patching, software tools, and process improvements Complies with information security policies Solid knowledge of project management methodologies; able to manage project phases or less complex projects Provide documentation highlighting integration, design, and features of solutions Qualifications Knowledge and experience in working with IBM Security Access Manager and Okta Auth0 Experience at delivering technology solutions at an enterprise level. Excellent diagnostic and troubleshooting skills, and the ability to excel under pressure Developed written and verbal skills, assignment and priority flexibility, and time management skills Understanding of

DNS, TCP/IP

addressing and networking (Internet, routers, switches) Knowledge of Web Services, Web and Application Services, Java and .NET technologies, and cloud services. Background in scripting, code development such as PowerShell, Ansible, Java and Terraform. Ability to work in teams on small to large projects. Excellent understanding of cloud and on-prem based infrastructure solutions and their Access Management needs. Ability to quickly learn and apply new concepts. Ability to drive and achieve consensus/support from large diverse groups. Strong written and verbal communication skills enabling effective articulation of strategy. Able to understand how concepts apply to design or architectural efforts Enterprise network security technologies including firewalls, IDS, IPS, NAC, WAF, and Web Proxies Working knowledge of Certificate/CA/PKI infrastructure Possesses and applies broad knowledge of concepts and principles or exhibits technical expertise related to server infrastructure and web-based application support. A four-year computer science or related technical degree or minimum of 5 (five) years of solid related work experience. Breadth of knowledge across many technology disciplines; including various access management solutions 8+ years of progressive related IT experience. Preferred Qualifications Heavy experience in federation using SAML 2.0, Open ID connect, REST, oAuth standards Firm understanding of SDS and experience with managing HA replicas Managing environments 500K-1MM external users Understanding of SAML and SSO federated identities Experience with installing, upgrading, and configuring ISAM/Security Access Manager/WebSEAL version 7.x, ISAM 9-10 and Okta Auth0

Access Management:

Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access Understanding of microservices-based architecture, API based system integration and Amazon Web Services cloud Identity & Access Understanding of working in a hybrid cloud environment and working knowledge of AWS Cloud Principles. Knowledge in scripting, code development such as PowerShell, Ansible, Java, .NET, etc. and automating developments by code Ability to work in teams on small to Large projects. Excellent understanding of cloud and on-prem based infrastructure solutions and their Access Management needs. Understanding of microservices-based architecture, API based system integration and Amazon Web Services cloud Identity & Access A four-year computer science or related technical degree or equivalent experience Hands on experience mentoring small to medium teams Ability to convert complex information into simple, explainable solutions. Possesses a planning orientation with integrative and strategic thinking skills. Demonstrated project management and client relationship skills. Good understanding of a zero trust network environment. Working Conditions Hybrid-Office Environment (Tuesdays, Wednesdays, Thursdays) International travel may be required On-call rotation for 24/7/365 coverage required. This job description is not a contract of employment nor for any specific job responsibilities. The Company may change, add to, remove, or revoke the terms of this job description at its discretion. Managers may assign other duties and responsibilities as needed. In the event an employee or applicant requests or requires an accommodation to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request. Compensation The Salary for this position generally ranges between $118,000 - $130,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law. Additionally, this position is typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at the Company's discretion. Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time. This is a hybrid position requiring three days in office per week in one of our hub locations (Philadelphia, PA; Cedar Rapids, IA; Denver, CO). Relocation assistance will not be provided for this position. What We Offer For eligible employees, we offer a comprehensive benefits package designed to support both the personal and financial well-being of our employees. Compensation Benefits Competitive Pay Bonus for Eligible Employees Benefits Package Pension Plan 401k Match Employee Stock Purchase Plan Tuition Reimbursement Disability Insurance Medical Insurance Dental Insurance Vision Insurance Employee Discounts Career Training & Development Opportunities Health and Work/Life Balance Benefits Paid Time Off starting at 160 hours annually for employees in their first year of service. Ten (10) paid holidays per year (typically mirroring the New York Stock Exchange (NYSE) holidays). Be Well Company holistic wellness program, which includes Wellness Coaching and Reward Dollars Parental Leave - fifteen (15) days of paid parental leave per calendar year to eligible employees with at least one year of service at the time of birth, placement of an adopted child, or placement of a foster care child. Adoption Assistance Employee Assistance Program Back-Up Care Program PTO for Volunteer Hours Employee Matching Gifts Program Employee Resource Groups Inclusion and Diversity Programs Employee Recognition Program Referral Bonus Programs Inclusion & Diversity We believe our commitment to diversity and inclusion creates a work environment filled with exceptional individuals. We're thrilled to have been recognized for our efforts through the Human Rights Campaign Corporate Equality Index, Dave Thomas Adoption Friendly Advocate, and several Seramount lists, including the Inclusion Index, 100 Best Companies for Working Parents, Best Companies for Dads, and Top 75 Companies for Executive Women. To foster a culture of inclusivity throughout our workforce, workplace, and marketplace, Transamerica offers a wide range of diversity and inclusion programs. This includes our company-sponsored, employee-driven Employee Resource Groups (ERGs), which are formed around a shared interest or a common characteristic of diversity. ERGs are open to all employees. They provide a supportive environment to help us better appreciate our similarities and differences and understand how they benefit us all. Giving Back We believe our responsibilities extend beyond our corporate walls. That's why we created the Aegon Transamerica Foundation in 1994. Through a mix of financial grants and the volunteer efforts of our employees, the foundation supports nonprofit organizations focused on the things that matter most to our people in the communities where we live and work. Transamerica's Parent Company Aegon acquired the Transamerica business in 1999. Since its start in 1844, Aegon has grown into an international company serving more than 23.9 million people across the globe.• It offers investment, protection, and retirement solutions, always with a clear purpose: Helping people live their best lives. As a leading global investor and employer, the company seeks to have a positive impact by addressing critical environmental and societal issues, with a focus on climate change and inclusion and diversity. • As of December 31, 2023 At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential unleashed by leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment — one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there. Transamerica is a part of Aegon, an integrated, diversified, international financial services group. The Aegon companies employ over 21,500 people and have approximately 31.7 million customers.• For more information, visit www.transamerica.com. • As of December 31, 2022 For more information about Transamerica's privacy practices, click here.