RESPONSIBILITIES:
Kforce has a client that is seeking to hire an Identity and Access Management Engineer in Mercer County, NJ.
Summary:
The Identity and Access Management Engineer (IAM) Engineer will serve as a member of a team that is responsible for the design, implementation, optimization, and support of enterprise IAM environments and related security controls. A hybrid work schedule is available depending upon level of experience and time within the position.
Responsibilities:
* Architecting, administering and support of production Identity & Access Management solutions
* Identity and Access Management Engineer will design, implementation, configuration, and support of SiteMinder policies, realms, rules, and schema
* Installation and configuration of Web Agents and secure proxy servers
* IIS and Apache Web server configuration and application troubleshooting as related to SSO and Access management
* Architect, implement and support internal and external PKI environments
* Manage LDAP and integrate with directory services such as Active Directory and Azure AD
* Understand and maintain SSL/PKI components including internal and external certificates
* Manage and troubleshoot load balancing systems such as F5 and AWS ALB/NLB as related to IAM solutions and enterprise applications
* As an Identity and Access Management Engineer, you will prepare, document, and maintain operating procedures, incident response procedures, security standards and troubleshooting guides
* Participate in internal audits to provide requested information and evidence; Understand, address, and close findings in a complete and timely fashion
REQUIREMENTS:
* 5 years of progressive work experience as an IT/IAM/security engineer; Experience with managing a team of direct reports is desired but not required
* Experience in upgrading existing CA/Broadcom products to latest versions
* Experience supporting CA SiteMinder, Policy Server, Identity Manager and CA Directory
* Hands on experience designing, implementing, operating, and troubleshooting complex IT security solutions in a dynamic work environment
* Complete understanding of Authentication and Authorization concepts and process flow
* Strong understanding of IAM technologies such as SAML and OAuth is required
* Expertise with the CA/Broadcom family of IAM solutions is required
* Windows and Linux server administration and troubleshooting skills are required as related to IAM
* Security vulnerability management of CA/Broadcom products
* Able to work independently, as well as with a team, and can transform high level requirements into well thought out, well documented, secure solutions
* Excellent verbal, written and technical skills; Able to take highly technical information and present it to varied audiences in a manner easily understood
* Experience with ForgeRock IAM solutions is a plus
* Experience migrating IAM functions from legacy products to Microsoft, Okta or Ping IAM solutions is a plus
* Experience designing and implementing zero-trust solutions is a plus
* Experience with federation solutions such as ADFS and Azure AD is desired
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.
Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.
This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.