Sr Manager, SSO Engineering People Leader (Cyber Security) at Charles Schwab in IN-Hyderabad

Job description

• At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape. ​
• Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region
• As a Senior SSO Engineering People Leader, you will provide strategic direction and senior functional leadership for teams delivering enterprise SSO, modern authentication, federation, and identity security capabilities. This role requires strong technology understanding, broad functional experience, and the ability to lead people leaders or senior engineers through complex, high-impact identity initiatives. You will shape engineering priorities, influence enterprise identity strategy, strengthen operational resiliency, and ensure authentication services support business growth, security, compliance, and client trust.
• The Senior SSO Engineering People Leader owns broader execution strategy, operational governance, and functional leadership for SSO engineering capabilities across enterprise platforms, applications, and identity ecosystems. The role is accountable for roadmap alignment, talent development, stakeholder engagement, risk reduction, audit readiness, platform modernization, and measurable delivery outcomes. This leader will partner with senior technology, cybersecurity, risk, compliance, application, infrastructure, and business leaders to advance secure, scalable, and user-centered identity services

Responsibilities

• Provide overall leadership for the SSO Engineering function, including senior engineers, technical leads, and other IAM engineering resources.
• Define and execute the strategic roadmap for enterprise authentication, federation, and SSO services.
• Provide leadership and governance across technologies including SAML, OAuth 2.0, OIDC, federation, MFA, passwordless authentication, FIDO2, passkeys, and adaptive authentication.
• Establish architecture and engineering standards for enterprise authentication platforms.
• Lead modernization of legacy authentication patterns toward standards-based, cloud-ready, and Zero Trust-aligned architectures.
• Provide strategic leadership for platforms such as PingFederate, PingAccess, Microsoft Entra ID, Okta, or equivalent identity technologies.
• Drive platform scalability, resiliency, disaster recovery, high availability, security, observability, and operational maturity.
• Establish standardized patterns for workforce, application, API, cloud, and service authentication.
• Partner with enterprise architecture and cybersecurity teams to define target-state authentication architecture.
• Drive automation across application onboarding, configuration management, testing, deployments, certificate management, and platform operations.
• Champion CI/CD, Infrastructure as Code, policy-as-code, automated testing, and DevSecOps practices within IAM engineering.
• Provide governance and technical oversight for high-risk or complex authentication integrations.
• Lead major platform transformations, migrations, upgrades, consolidations, and modernization initiatives.
• Establish controls to address authentication threats including credential compromise, token misuse, session attacks, unauthorized access, and configuration vulnerabilities.
• Ensure authentication capabilities meet applicable regulatory, cybersecurity, risk, audit, and enterprise control requirements.
• Own engineering performance metrics and executive reporting covering reliability, availability, security, delivery, incidents, onboarding, automation, and technical debt.
• Partner with Product and Application Engineering leaders to prioritize demand and establish scalable application onboarding models.
• Lead capacity planning, workforce strategy, talent development, succession planning, performance management, and engineering skill development.
• Serve as an escalation point for critical authentication incidents and major technology risks.
• Influence senior leaders and stakeholders on identity strategy, technology investments, engineering priorities, and risk decisions.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, 12+ years of technology experience, with substantial experience in IAM, cybersecurity, authentication, or enterprise security engineering.
• Extensive experience designing or leading enterprise-scale SSO and federation platforms.
• Deep understanding of SAML 2.0, OAuth 2.0, OIDC, JWT, MFA, PKI, certificates, session management, and modern authentication patterns.
• Strong knowledge of enterprise IAM technologies such as Ping Identity, Microsoft Entra ID, Okta, or comparable platforms.
• Demonstrated experience leading senior engineers and complex engineering organizations.
• Experience establishing technical roadmaps, architecture standards, engineering governance, and operating models.
• Strong understanding of Zero Trust and identity-centric security architecture.
• Experience with cloud, APIs, containers, CI/CD, automation, and modern software engineering practices.
• Demonstrated success delivering large, complex, cross-functional technology programs.
• Strong executive communication, influencing, stakeholder management, and decision-making skills.
• Professional certifications such as CISSP, CISM, SC-300, AZ-500, enterprise architecture, cloud security, or relevant identity provider certifications are desirable.
• Experience leading IAM engineering within financial services or another highly regulated enterprise.
• Experience modernizing large-scale legacy authentication environments.
• Knowledge of Privileged Access Management, Identity Governance, Non-Human Identities, secrets management, API security, and machine-to-machine authentication.
• Experience with Kubernetes, containerized platforms, cloud-native architectures, and public cloud security.
• Knowledge of identity threat detection, authentication telemetry, SIEM/SOC integration, and continuous monitoring.
• Relevant cybersecurity, IAM, architecture, cloud, or leadership certifications.
• Familiarity with Microsoft Entra ID, Okta, Ping Identity, Zscaler Private Access, FIDO2/Passkeys, SCIM, REST APIs, Terraform, Python, PowerShell, Git, CI/CD, AWS, Azure, GCP, Kubernetes, Docker, identity analytics, observability, AI-driven identity security, and Non-Human Identity management.
• Experience in financial services, cybersecurity risk management, regulated enterprise technology, or large-scale identity platform modernization.
• Experience leading Zero Trust, passwordless, identity governance, privileged access, cloud security, non-human identity, and resilience initiatives across multiple teams or platforms.
• Experience managing vendor relationships, platform strategy, funding/capacity tradeoffs, security control remediation, audit outcomes, and executive-level reporting.

Skills

Required

• SAML 2.0
• OAuth 2.0
• OIDC
• JWT
• MFA
• PKI
• certificates
• session management
• modern authentication patterns
• Ping Identity
• Microsoft Entra ID
• Okta

Preferred

• CISSP
• CISM
• SC-300
• AZ-500
• enterprise architecture
• cloud security
• identity provider certifications
• Privileged Access Management

Benefits

• At Schwab India, you’re empowered to shape your future. We support your growth through meaningful work, continuous learning, and a culture rooted in trust and collaboration – so you can build the skills to make a lasting impact. Our benefits are designed to care for your wellbeing, your family, and your long-term financial security. Our base benefits, wellbeing, and total rewards include:
• Competitive compensation and retirement programs including Employee Provident Fund (EPF), Gratuity, and optional National Pension System (NPS) contributions
• Robust Paid Time Off, including annual/privilege leave, sick and casual leave, public holidays, maternity/paternity leave, and more
• Education assistance for continued learning to help you grow
• Comprehensive medical insurance with Outpatient Department (OPD) services, including vaccination, pharmacy, dental, and vision coverage
• Annual reimbursement for health check-ups and mental health support through our Employee Assistance Program (EAP)
• Childcare (creche) reimbursement for eligible employees
• Transportation and meal benefits that support your day-to-day work
• Group life, personal accident, and critical illness insurance