Identity & Cloud Security Specialist

Assess the identity and authentication platforms, cloud storage services, and the end-to-end verifiable-credential lifecycle underpinning the Digital Trust solution, focusing risk analysis where SNB owns configuration and integration.

Key Responsibilities:
• Review the Ping Identity platform (PingOne Verify, DaVinci, Credentials) and related services/integrations, leveraging Ping’s published security documentation and SOC 2 Type 2 rather than re-performing platform-level assessments
• Assess Microsoft Entra authentication services used by the GNB Verify apps for authentication, authorization, and access control
• Evaluate cloud storage services (user feedback from GNB Wallet; verifier audit logs from GNB Verify) for access control, encryption, and data protection
• Assess the end-to-end Verifiable Credential lifecycle: issuance, update, presentation, revocation, and verification
• Support the vendor assessment and contribute identity/cloud findings to the consolidated SRA

Deliverables: Identity, cloud, and VC-lifecycle inputs to Deliverable 1 (Vendor Assessment) and the consolidated SRA report.

Skills: Security Assessments, Identity Platforms, Authentication Platforms, Ping Identity, Microsoft Entra, Azure, Cloud Security, OAuth 2.0, OIDC, SAML, Verifiable Credentials, DIDs, SSI, Federated Authentication, API Integration

Location: Fredericton, NB

Apply Now