About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale - tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters - to you, to your community, and to the world. Progress starts with you.
Job Description Information security is foundational to Visa's culture and critical to our leadership in electronic payments. This role sits within Cybersecurity's Global Business-to-Business Identity & Access Management (B2B IAM) team, which secures access to Visa's business portals and associated services worldwide.
You will design, implement, and operate IAM solutions-primarily on ForgeRock-aligned to an evolving threat landscape, regulatory obligations, and enterprise architecture. You will partner closely with Operations, Database, and Middleware Engineering to meet or exceed SLA and availability targets while supporting compliance with GDPR, PCI DSS, and ISO/IEC 27001.
Essential Functions:
- Integrate web applications for single sign-on (SSO) using ForgeRock Access Management (AM).
- Establish and maintain federation using SAML 2.0, OpenID Connect, and OAuth 2.0.
- Configure authorization policies and build adaptive authentication trees/journeys in ForgeRock AM.
- Install, configure, harden, and tune ForgeRock AM in multi-region production environments.
- Design robust session management across geographically distributed locations.
- Install, configure, and operate ForgeRock Directory Services (DS), including replication and user directory synchronization.
- Configure LDAP password policies and ACIs; automate via custom scripts.
- Build a performance lab and execute load tests for access management components, model production traffic patterns into test scenarios.
- Deploy and manage ForgeRock web and application server agents.
- Work across heterogeneous stacks including Microsoft IIS, Apache HTTP Server, NGINX, Apache Tomcat, Node.js, and JBoss Web Server (JWS).
- Implement and support Multi-Factor Authentication (MFA) across varied use cases and factors.
- Serve as IAM subject matter expert (SME) for cross-functional stakeholders and global support groups.
- Produce high-quality technical designs, runbooks, and build/operational documentation.
- Collaborate effectively with globally distributed teams and make informed, time-sensitive decisions impacting user experience and support productivity.
Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.
Qualifications Basic Qualifications:
- 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.
Preferred Qualifications:
- 5+ years of relevant work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD, OR 8+ years of relevant work experience.
- 5 or more years of relevant work experience with a bachelor's degree, or at least 2 years of relevant work experience with an Advanced Degree (e.g., Masters, MBA, JD, MD), or 0 years of relevant work experience with a PhD, OR 8 or more years of relevant work experience.
- 6 or more years of work experience with a Bachelor's degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD.
- Hands-on experience with:
- Web/application servers: Apache HTTP Server, Microsoft IIS, Apache Tomcat, JBoss Web Server (JWS).
- LDAP technologies and directory administration.
- Linux and Windows operating systems.
- Application, system, and performance monitoring tools.
- Experience collaborating with cross-functional, geographically dispersed teams.
- Working knowledge of software development methodologies, including Waterfall and Agile/Scrum.
- Proven ability to execute and drive results collaboratively.
- Excellent verbal and written communication skills.
- Understanding of release management and familiarity with tools such as Jira.
- Strong knowledge of web-based three-tier application and security architectures; good understanding of network components (firewalls, load balancers, WAF).
- Experience with API authentication and authorization (e.g., OAuth 2.0, mTLS, JWT tokens).
- Understanding of incident, change, and problem management and software release management processes.
- Experience with Java and scripting languages (e.g., Shell, Python, Groovy) to develop custom IAM solutions and automation.
- Experience applying AI/ML to IAM to enhance platform capabilities and reduce repetitive tasks.
- Familiarity with security and privacy frameworks relevant to this role, including GDPR, PCI DSS, and ISO/IEC 27001.
Visa is an EEO Employer Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.
