Platform Data Security Engineering- Manager 

Location: Hyderabad, Telangana, India, Noida, Uttar Pradesh, India

Remote Type: Hybrid

Time Type: Full time

Job Description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

We are seeking a highly skilled Platform Security Engineering Lead to architect and implement secure, scalable, and data-driven solutions within the ecosystem. This role will focus on platform-level security, identity and access management, and data engineering, ensuring compliance, governance, performance, and reliability across modules and integrations.

Key Responsibilities

• Authorization & Authentication Engineering
• Design and implement secure authentication mechanisms using SAML 2.0, OAuth 2.0, LDAP, and Multi-Factor Authentication (MFA).
• Architect and manage Role-Based Access Control (RBAC) across modules, ensuring least-privilege access and separation of duties.
• Define and enforce Access Control Lists (ACLs) at the table, field, and record levels to protect sensitive data.
• Implement Scoped Application permissions to isolate functionality and restrict access to specific modules or components.
• Define and own User groups and locations in the platform.
• Develop and maintain user provisioning and de-provisioning workflows integrated with enterprise IAM systems.
• Monitor and audit login activity, session management, and access violations using native tools
• Collaborate with InfoSec and IAM teams to align access policies with enterprise security standards and compliance frameworks.

• Security Strategy & Compliance
• Define and enforce compliance to security policies, standards, and best practices for the platform in alignment with recommended Platform security shared responsibility model. 
• Ensure service now platform is compliant with internal and external infosec requirements and industry best practices
• Establish governance frameworks for secure development, data protection, and risk mitigation.

• Data Privacy, Security & Encryption
• Defining/Implement Service Now data classification, data retention & data discovery strategy in alignment with Ameriprise data management policies /standards
• Implement data encryption strategy at rest, in transit & encryption key management
• Determining the data collection, storage, usage, sharing, archiving, and destruction policy of data processed in instances.
• Monitor access patterns and system activity to identify potential security threats.

• Secure Integrations & Automation
• Ensure and mature secure API management for integrations between and third-party security tools (e.g., Active Directory, CyberArk and Aveksa, Azure AD, RIM, IAM).
• Ensure secure data exchange and prevent unauthorized access to instances.

• Leadership & Collaboration
• Mentor platform engineers and developers on secure coding, identity management, and data handling best practices.
• Collaborate with cybersecurity, data, and infrastructure teams to ensure platform alignment with enterprise architecture.
• Lead technical design reviews, platform governance, and roadmap planning for platform security aspects

Required Skills & Qualifications:

 Technical Expertise: 

• Security: Deep understanding of SecOps, GRC, RBAC, ACLs, and platform security best practices. 
• Cybersecurity & Compliance: Strong knowledge of security frameworks (NIST, ISO 27001, CIS), regulatory compliance, and risk management. 
• Access & Identity Management: Expertise in SSO, MFA, OAuth, LDAP, and user authentication. 
• Integration & Development: Experience with REST APIs, JavaScript, OAuth, and secure integration practices. 
• Cloud Security: Understanding of SaaS security, encryption methods, and cloud-based security models.

 Certifications

• Certifications: 
• Certified System Administrator (CSA) 
• Certified Implementation Specialist – SecOps or GRC 

 Preferred Qualifications:

• Experience securing large-scale implementations in regulated industries (finance, healthcare, government).
• Strong problem-solving, analytical, and communication skills to interact with technical and non-technical stakeholders.
• Knowledge of emerging security trends, zero trust architecture, and AI-driven security solutions.
• Cybersecurity Certifications: 
• Certified Information Systems Security Professional (CISSP) 
• Certified Information Security Manager (CISM) 

 Experience Required:

• 15+ years of IT security experience, with 12+ years in security architecture, administration, or operations.
• Hands-on experience in security automation, incident response, and risk management using .
• Prior experience working with cybersecurity, risk management, and IT governance teams.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full time(2:00p-10:30p)AWMPO AWMP&S President's OfficeTechnology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.