Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Communication @ 7
Distributed Systems
GDPR @ 4
Leadership @ 7
Observability
Security @ 4
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
As part of the CTO Security Service Infrastructure group, this role focuses on solving complex systems problems and enabling engineers to develop products and infrastructure security technologies. The position serves as an architect and product owner in the CTO’s office, providing guidance on infrastructure security, logical security controls, distributed systems, and Bloomberg’s global technology footprint.
The role will define and drive Bloomberg’s strategy for credential-based authentication experiences, including login workflows, secure credential delivery and management, password-based authentication policies and controls, delegated access, and secure access patterns for engineering and enterprise environments. The position works across engineering, security, product, support, and business teams to create usable, resilient, and scalable authentication experiences and shape the long-term direction of the controls, tools, and workflows that support them.
Responsibilities
- Evaluate and improve workflows for first-time credential delivery, login orchestration, password setup, reset, recovery, and related authentication journeys.
- Drive the evolution of Bloomberg’s login process, including its long-term direction, controls, and implementation priorities.
- Define and refine password policies for enterprise and client-facing use cases while balancing security, usability, and supportability.
- Partner with authentication team members to integrate login and credential workflows with federated access patterns where appropriate.
- Work with engineering teams to design and implement authentication-related solutions, controls, and integrations.
- Define policies, standards, and control frameworks for delegated access and other sensitive authentication-linked workflows, including guardrails for approval, accountability, and auditability.
- Establish a comprehensive understanding of authentication workflows, dependencies, pain points, and future-state opportunities.
- Produce product requirements, architecture direction, and implementation guidance for authentication initiatives.
- Align stakeholders across engineering, product, support, and business teams on priorities, tradeoffs, and delivery plans.
- Ensure appropriate auditing, reporting, and observability for authentication workflows and related controls.
- Assess risks and identify opportunities to strengthen authentication processes and password-related controls.
- Collaborate with vendors, consultants, and industry peers to stay informed about authentication and credential management technologies.
Requirements
- 7+ years of experience building, maintaining, and managing security aspects of large-scale, distributed infrastructure and applications.
- Strong experience with authentication, credential management, and provisioning technologies, including engineering, integration, and automation with an emphasis on security.
- Experience building collaborative relationships across functions, leading through influence, establishing consensus, and executing with a focus on correctness, scalability, and usability of distributed infrastructure.
- Ability to build proof-of-concept solutions, innovate, and partner with engineering teams to drive adoption.
- Ability to collect and document detailed product requirements, including RFCs, design rationale, and decision-making.
- Experience determining when to build, buy, or reuse technology.
- Deep knowledge of authentication protocols and standards and their adoption in large enterprises.
- Strong written and oral communication skills for working with hands-on technical experts and senior leadership.
- Experience managing large-scale infrastructure.
- Knowledge of regulatory requirements such as GDPR, DORA, and HIPAA.
- Experience integrating with and securing in-house-developed, open-source, and third-party solutions.
- Hands-on experience with authentication and credential management products.
- Hands-on experience with enterprise identity management technologies and with aligning business requirements, organizational behaviors, and technology.
Benefits
Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs.