What are the responsibilities and job description for the ISD Engineer IV-ID & Access Management position at System One?
ISD Engineer IV-ID & Access Management
Location: Remote or Hybrid reporting to Vienna, VA or Pensacola, FL
Hours: Monday – Friday; 8:00 am – 4:30 pm EST
Pay Rate: Open to Both C2C and W2 options
Position Type: Multiyear Contract
Description:
To research, evaluate, design, implement, and maintain system and product solutions, applying knowledge of engineering principles related to Client Identity Access, Authorization, and Authentication (IAM) and Fraud prevention technologies. Provide technical direction and engineering support for projects and infrastructure build for IAM solutions. Develop and maintain a working knowledge of evolving IT engineering industry technologies/competition, vendors, concepts, and trends directly related to Identity, Authorization, and Authentication for business to client (E.g., organization's Online Banking and other channels).
Responsibilities:
• Ability to administer and provide support for IAM and Fraud prevention applications such as ForgeRock, Twilio, Guardian/FeatureSpace, Daon components policy servers, databases, and directories
• Experience in setup, configuration, and management of Policy servers, Web agents, Secure Proxy Server, and Federation
• Develop and support federations with internal systems and external organizations
• Implement changes through multiple environments utilizing the Change Management process
• Apply engineering principles into the design and enhancement of new and existing systems
• Provide input and make budgetary recommendations regarding staffing and equipment Document new system components, or modifications to existing
• Ensure the security and integrity of system and product solutions, including compliance with the organization, industry engineering, and Information Security principles and practices
• Present clear, organized, and concise information to all audiences through a variety of media to enable effective business decisions
• Perform engineering tasks and assignments in support of business needs
• Perform engineering technology research, procurement, deployment, and configuration for new and modified systems
• Perform other duties as assigned
Qualifications (all required unless otherwise noted):
• Extensive experience deploying ForgeRock on Azure Kubernetes Service (AKS)
• Experience with two SMS communication systems
• Extensive experience supporting multiple IAM environments.
• Must be confident implementing, configuring, managing, and deploying IAM products (e.g.ForgeRock, RSA, Daon, Ping, Azure, SiteMinder, etc.)
• Extensive experience and expert knowledge of information security analysis and design techniques
• Expert knowledge of data security practices and procedures, including systems analysis, authentication technologies, and access controls. Priorities will be given to those with expert knowledge and skill in groovy and java scripting, Identity Federation, SAML, JBoss, and Directory Services/LDAP.
• Experience working in Agile methodologies for project planning and resource management
• Strong planning and organizational skills
• Strong research, analytical, and problem-solving skills
• Ability to present findings and conclusions clearly and concisely
Desired:
• Extensive IAM applications experience
• Bachelor Degree in business, information technology, or related fields
• CISSP, CISA, CCSP, or other related Information Security certifications
• BA, Master’s degree, PMP, MSCE/MCITP, Linux certifications
• Experience with Agile methodologies (e.g., SAFe)
• ForgeRock Identity & Access Specialist or Professional certification(s)
• Experience with multiple open-source authentication protocols including SAML, OAuth, and OpenID
• Experience with Ping Identity products
• Experience with Azure Active Directory Federation
• Experience with Kubernetes and Docker services
• Knowledge of the financial services industry
• Experience with Daon IdentityX Platform
