RBAC Engineer

Responsibilities

• Design and implement RBAC models across enterprise applications, cloud platforms, and internal systems.
• Define roles, permissions, and access policies aligned with business functions and least-privilege principles.
• Collaborate with Security, Dev Ops, Infrastructure, and Application teams to integrate RBAC into systems and workflows.
• Automate provisioning and de-provisioning of user access.
• Conduct access reviews, audits, and compliance reporting.
• Support integration with identity providers (IdP) and SSO solutions (e.g., Okta, Azure AD, Auth0).
• Implement and maintain access governance processes.
• Troubleshoot access-related issues and ensure minimal operational disruption.
• Document RBAC architecture, standards, and operational procedures.
• Stay current with security standards, regulations, and IAM best practices.
• Leads delivery and implementation of IAM technologies across the bank.
• Ensure that Huntington’s identity & access management services are designed to be compliant with security and privacy standards and other industry standards and practices.
• Consult with business units when implementing access for new systems.

We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 3+ years of experience in Identity & Access Management (IAM) or security engineering.
• Strong understanding of RBAC concepts, least privilege, and separation of duties.
• Experience with IAM platforms (e.g., Okta, Azure AD, AWS IAM, Ping, SailPoint).
• Knowledge of authentication and authorization protocols (OAuth2, OIDC, SAML).
• Experience with cloud platforms (AWS, Azure, GCP).
• Familiarity with scripting/automation (Python, Power Shell, Terraform, etc.).
• Understanding of compliance frameworks (SOX, SOC 2, ISO 27001).
• Strong analytical and problem-solving skills
• Excellent communication and cross-functional collaboration
• Attention to detail
• Security-first mindset
• Ability to translate business requirements into technical access models

• Experience implementing RBAC in microservices or SaaS environments.
• Experience with policy-as-code or fine-grained authorization systems (e.g., OPA, Cedar).
• Security certifications (CISSP, CISM, Azure/AWS Security certifications).
• Experience with access governance and entitlement review tools.