Authentication Systems Engineer

4 weeks ago


Oak Ridge, United States ITR Full time
Job DescriptionJob DescriptionJob Posting Title: Identity, Credential, and Access Management (ICAM) Systems Engineer Special RequirementThis position requires the ability to obtain and maintain a clearance from the Department of Energy. Purpose East Tennessee company is seeking qualified applicants for an Identity, Credential, and Access Management (ICAM) Systems Engineer position to support their computing operations group. This group is responsible for the access and authentication infrastructure required to support 10,000+ Windows, Mac and Linux desktops, laptops, servers, and applications. The successful candidate will have a strong understanding of federated identity, authentication and authorization technologies, ideally including SAML, Kerberos, Active Directory, LDAP, OAuth, and OpenID-Connect.Major Duties/Responsibilities Primary duties will include:
  • Serve as a Subject Matter Expert (SME) for enterprise access and authentication infrastructure
    • Collaborate with other SMEs to ensure the reliable, effective, and secure operation of client IT systems
    • Contribute to the development of solution and enterprise architecture involving authentication, particularly federated identity and single sign on
    • Serve as one of InCommon Federation Site Administrators
  • Manage the operation of Federated Identity, Authentication, and Authorization infrastructure
    • Provide design and operational support for SAML, WS-Federation, OAuth, OpenID-Connect, JSON Web Token, and Open Token authentication systems based on Ping Federate, including integration of these systems to back-end directory services
    • Perform monitoring and troubleshooting tasks
    • Configure and manage identity provider and service provider connections
    • Develop tools for automation for routine administrative and monitoring tasks
  • Manage the operation of LDAP infrastructure systems using OpenLDAP
  • Manage the operation of SecurID infrastructure
  • Serve as a key SME for Public Key Infrastructure (PKI), particularly as it relates to X.509 certificates for client authentication
Required Qualifications
  • Bachelor's degree in an Information Technology-related field plus 5 years of relevant work experience or 10 years of relevant work experience
  • Experience with authentication technologies (i.e. Active Directory) and concepts. Must possess a strong desire to learn federated identity management technologies (i.e. SAML).
  • Significant experience scripting in both Linux and Windows environments
  • Experience using data analysis (such as from logs), monitoring, and automation to improve operational excellence, reduce operational labor, and improve the overall security posture
  • Excellent interpersonal skills suitable for user support and ability to work well with peers
  • Experience in an environment requiring change control processes
  • Demonstrated ability to perform job tasks while considering cyber security risk of those tasks, and consulting with security professionals when necessary.
  • Demonstrated capabilities to work in a dynamic environment and translate user needs into actionable project plans and see those plans through execution while balancing needs for short-term, high-priority tasks.
  • Good written and verbal communication skills
  • Ability to work in a group and alone on various projects
  • Ability to time manage and prioritize projects
  • Good documentation skills
  • Demonstrated analytical and problem solving skills
  • Strong commitment to ethical and professional values
Desired Qualifications
  • A minimum of 2 years of experience with authentication and authorization technologies in an large environment, specifically including experience with the use of Kerberos, SAML, and OAuth for authentication. Experience with Ping Federate is particularly desired.
  • Experience working with federated identity management infrastructure, including the configuration and management of SAML- and OAuth-based identity provider and service provider connections
  • Experience in deploying and managing Public Key Infrastructure technologies, particularly including Microsoft PKI tools
  • Strong knowledge of multiple operating systems
  • Experience with DevOps and with configuration management tools, with Ansible particularly preferred
  • Advanced understanding of Microsoft server technologies specific to domain controllers, and all AD associated services such as ADFS, DNS, DHCP, DFS and GP
  • Previous experience working in a government, scientific, or other highly technical environment


  • Oak Ridge, United States ITR Full time

    Job DescriptionJob DescriptionJob Posting Title: Identity, Credential, and Access Management (ICAM) Systems Engineer Special RequirementThis position requires the ability to obtain and maintain a clearance from the Department of Energy. Purpose East Tennessee company is seeking qualified applicants for an Identity, Credential, and Access Management (ICAM)...

  • Systems Engineer

    2 months ago


    Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer is responsible for developing, managing, and documenting requirements, risks, and cost projections for rapidly evolving projects, including manufacturing nuclear fuels for SMRs, microreactors for terrestrial and space applications, and other technologies. Overall, this position is about enacting a...

  • Systems Engineer

    1 week ago


    Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer is responsible for developing, managing, and documenting requirements, risks, and cost projections for rapidly evolving projects, including manufacturing nuclear fuels for SMRs, microreactors for terrestrial and space applications, and other technologies. Overall, this position is about enacting a...

  • Systems Engineer

    4 weeks ago


    Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer is responsible for developing, managing, and documenting requirements, risks, and cost projections for rapidly evolving projects, including manufacturing nuclear fuels for SMRs, microreactors for terrestrial and space applications, and other technologies. Overall, this position is about enacting a...

  • Sr. Systems Engineer

    2 months ago


    Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer position is responsible for providing Engineering support to the TRISO-X fuel production facility.Responsibilities:Responsible for participation in facility design process ensuring requirements are allocated to appropriate systems and subsystems.Works with engineering leads and subcontractors to define...


  • Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer position is responsible for providing Engineering support to the TRISO-X fuel production facility.Responsibilities:Responsible for participation in facility design process ensuring requirements are allocated to appropriate systems and subsystems.Works with engineering leads and subcontractors to define...

  • Sr. Systems Engineer

    4 weeks ago


    Oak Ridge, United States MS Technology, Inc. Full time

    Job DescriptionJob DescriptionThe Systems Engineer position is responsible for providing Engineering support to the TRISO-X fuel production facility.Responsibilities:Responsible for participation in facility design process ensuring requirements are allocated to appropriate systems and subsystems.Works with engineering leads and subcontractors to define...


  • Oak Ridge, United States Spectra Tech Full time

    Mid-/Senior-Level Network Systems Engineer We are seeking a Network/Systems Engineer to be a part of a world-class capabilities related to the energy science and technology associated with the ORNL and DOE mission. Selection will be based on qualifications, relevant experience, skills, and education. This position is within the ORNL National Security...


  • Oak Ridge, United States Spectra Tech Full time

    Mid-/Senior-Level Network Systems Engineer We are seeking a Network/Systems Engineer to be a part of a world-class capabilities related to the energy science and technology associated with the ORNL and DOE mission. Selection will be based on qualifications, relevant experience, skills, and education. This position is within the ORNL National Security...


  • Oak Ridge, Tennessee, United States Oak Ridge National Laboratory Full time

    Job Title: Lead Systems Engineer at Oak Ridge National Laboratory (ORNL)We're looking for a Lead Systems Engineer with a focus on integrating beam transport line sub-systems for the Second Target Station (STS) project at ORNL. As part of the Accelerator Systems group, you'll report to the STS Accelerator Systems Manager and be responsible for ensuring the...


  • Oak Ridge, United States Oak Ridge National Laboratory Full time

    Requisition Id12498 Overview: US ITER is a $6.5 Billion, Department of Energy multi-laboratory project that executes the United States (US) contributions to the ITER Project in France lead by the ITER International Organization (IO). The US is a non-host partner in the world's largest and unprecedented scientific partnership as part of a seven-member...


  • Oak Ridge, Tennessee, United States Oak Ridge National Laboratory Full time

    Requisition Id13074 Visa sponsorship of any kind is unavailable for this position (H1B, F1, OPT, H4, J1, etc.). Overview: We are seeking a Linux Systems Engineer who will play a crucial role in managing and supporting Linux swerver and large storage systems Areas of focus include maintaining system health, analyzing system performance, and ensuring all...


  • Oak Ridge, United States NANA Full time

    Job Summary: Akima Infrastructure Services, LLC (AIS), is actively seeking Engineering, Professional, Technical, and administrative personnel as part of our staff augmentation team supporting the Department of Energy at the Y‑12 National Security Complex located in Oak Ridge, Tennessee and the Pantex Plant located in Amarillo, Texas. Successful...


  • Oak Ridge, United States Akima Full time

    Overview W ork Where it Matters Job Summary: Akima Infrastructure Services, LLC (AIS), is actively seeking Engineering, Professional, Technical, and administrative personnel as part of our staff augmentation team supporting the Department of Energy at the Y‑12 National Security Complex located in Oak Ridge, Tennessee and the Pantex Plant...


  • Oak Ridge, United States NANA Full time

    Job Summary: Akima Infrastructure Services, LLC (AIS), is actively seeking Engineering, Professional, Technical, and administrative personnel as part of our staff augmentation team supporting the Department of Energy at the Y‑12 National Security Complex located in Oak Ridge, Tennessee and the Pantex Plant located in Amarillo, Texas. Successful...


  • Oak Ridge, United States ITR Full time

    Job DescriptionJob DescriptionPosition TitleWindows\VDI System Management Engineer PurposeEast Tennessee Research Facility is seeking applications for the position of Windows\VDI Systems Management Engineer in the System Management and Engineering Team. The team manages 14K+ client and server systems in a highly dynamic research community utilizing many...


  • Oak Ridge, United States ITR Full time

    Job DescriptionJob DescriptionPosition TitleWindows\VDI System Management Engineer PurposeEast Tennessee Research Facility is seeking applications for the position of Windows\VDI Systems Management Engineer in the System Management and Engineering Team. The team manages 14K+ client and server systems in a highly dynamic research community utilizing many...


  • Oak Ridge, United States EmDrive LLC Full time

    Location: Oak Ridge, TN Job Title: Systems Security Analyst - Level 5 - 6 Organization: Chief Information Security Office Job Specialty: Cyber Security Clearance required: desired DOE Q, required DOE L EmDrive, LLC. (EmDrive) is a nationally-recognized computer systems design services firm dedicated to providing critical infrastructure systems...


  • Oak Ridge, United States EmDrive LLC Full time

    Location: Oak Ridge, TN Job Title: Systems Security Analyst - Level 5 - 6 Organization: Chief Information Security Office Job Specialty: Cyber Security Clearance required: desired DOE Q, required DOE L EmDrive, LLC. (EmDrive) is a nationally-recognized computer systems design services firm dedicated to providing critical infrastructure systems engineering...


  • Oak Ridge, United States EmDrive LLC Full time

    Location: Oak Ridge, TN Job Title: Systems Security Analyst - Level 5 - 6 Organization: Chief Information Security Office Job Specialty: Cyber Security Clearance required: desired DOE Q, required DOE L EmDrive, LLC. (EmDrive) is a nationally-recognized computer systems design services firm dedicated to providing critical infrastructure systems...