Identity & Access Management Engineer

About the Role

A career at CNS at the Y-12 National Security Complex offers the opportunity to make a personal impact on our nation. We are seeking an Identity & Access Management Engineer to help improve and optimize mission-critical systems. This is an opportunity to shape the digital identity future in a large and complex enterprise, grow your skills, and lead game-changing efforts.

Key Responsibilities

• Design and implement applications, roles, provisioning plans, and workflows in SailPoint IdentityIQ to automate access management.
• Configure applications for authentication using PingAccess and PingFederate with SAML and OIDC.
• Onboard privileged accounts and use cases into CyberArk.
• Evangelize centralized authentication and provisioning to support greater adoption of SaaS and IaaS, as well as modernizing in-house developed applications.
• Collaborate and contribute to the enterprise Zero Trust strategy.
• Introduce standard methodologies and principles to enable consistent delivery and alignment with long-term direction.
• Identify areas for automation and application of DevOps principles.
• Create solutions to advance the security and usability of digital identity within the enterprise.
• Work with business functional owners, architects, operations, and support personnel to ensure solutions meet business needs, are well-engineered, operable, supportable, and maintainable.
• Engage in every phase of development from requirements gathering and design activities to implementing and improving identity workflows and solutions.
• Conduct research, evaluation, design, implementation, and maintenance of system and product solutions.
• Expand into various areas of identity management such as Directory Administration, Multi Factor Authentication, Identity Governance, SSO, Web Access Management, and Privileged Access Management.

Requirements & Tech Stack

• SailPoint IdentityIQ
• PingAccess
• PingFederate
• SAML
• OIDC
• CyberArk
• SaaS
• IaaS
• Zero Trust Architecture
• DevOps Principles
• Directory Administration
• Multi Factor Authentication
• Identity Governance
• SSO
• Web Access Management
• Privileged Access Management

Qualifications

• Minimum Job Requirements:
• Bachelor's degree in Computer Science, CIS, MIS, Math or related field: No experience.
• Eight or more years of education, training, and/or relevant experience may be considered to satisfy educational and years-of-experience requirements.
• Preferred Job Requirements:
• Bachelor's degree in Computer Science, CIS, MIS, Math or related field.
• At least 3 years of relevant experience.
• At least 1 year of Identity Management Operations (Tier 3+ support).
• Ability to logically and systematically evaluate project and process problems to determine appropriate solutions.
• Exercises initiative and independent judgment and discretion under limited supervision.
• Experience with process automation.
• Ability to create, compose, and edit written materials.
• Ability to develop and deliver presentations.
• Ability to work independently and effectively as part of a group with diverse backgrounds and skills.
• A strong sense of ownership.
• Strong understanding of Identity and Access Management systems and how they relate to governance, identity lifecycle, and account management.
• Proven experience in effectively handling multiple tasks while meeting deadlines.
• Strong presentation skills, interpersonal communication skills, time management skills, organizational skills, and oral and written skills.
• Requires a Q clearance; however, all qualified candidates will be considered regardless of their current clearance status.
• The ability to obtain and maintain a Department of Energy Q clearance is required.
• This position may require entry into the Material Access Areas (MAA) and participation in the Human Reliability Program (10 C.F.R. Part 712), which requires successful completion of a DOE counterintelligence evaluation and may include a counterintelligence-scope polygraph examination.
• This position may be categorized as a “designated position” identified by 10 C.F.R. Part 709, requiring successful completion of a DOE counterintelligence evaluation that may include a counterintelligence-scope polygraph examination.
• U.S. citizenship is a requirement for security clearance applicants.