Identity and Directory Management Services Senior Engineer

Empower AI is seeking a highly skilled Senior Identity and Directory Management Services Engineer to join our team. As a Senior Engineer, you will be responsible for designing, administering, and managing Identity and Directory Management Services (IDMS) and Identity, Credential, and Access Management (ICAM) solutions for our enterprise users and architecture.

The ideal candidate will have extensive experience with Okta, including installation, configuration, and migrations. You will troubleshoot advanced problems within the Okta Identity Provider (IdP) using tools such as SAML Tracer, Fiddler, and other similar tools. Additionally, you will have integration experience with SAML, OpenID Connect, RADIUS, and OAuth, as well as experience with Multi-Factor Authentication and Passwordless Authentication.

As a Senior Engineer, you will provide advanced support for Identity and Access Management (IAM)/Single Sign-On (SSO)/Multi-Factor Authentication (MFA) by troubleshooting difficult software problems, implementing bug fixes, and performing root cause analysis using agile methodologies. You will also communicate effectively with customers over phone, email, or ticketing systems.

The successful candidate will have a strong understanding of Identity and Access Management (IAM) concepts, technologies, and authentication protocols, including SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID, and REST APIs. You will also have experience with Directories, Single Sign-On (SSO), Federation, Delegated Administration, API Gateways, and Service-Oriented Architecture (SOA) services.

We are looking for a highly motivated and experienced Senior Engineer who can work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others. The ideal candidate will have a Bachelor's degree in a computer science-related field and 7-12 years of experience in a related field. A Master's degree in a computer science-related field is preferred.

We offer a competitive salary and benefits package, as well as opportunities for professional growth and development. If you are a highly skilled Senior Engineer with a passion for Identity and Directory Management Services, we encourage you to apply for this exciting opportunity.

Responsibilities:

• Design, administer, and manage IDMS and ICAM solutions for enterprise users and architecture.
• Troubleshoot advanced problems within the Okta IdP using tools such as SAML Tracer, Fiddler, and other similar tools.
• Provide advanced support for IAM/SSO/MFA by troubleshooting difficult software problems, implementing bug fixes, and performing root cause analysis using agile methodologies.
• Communicate effectively with customers over phone, email, or ticketing systems.
• Develop and implement technical capabilities, including IAM solutions and application integrations, to enhance enterprise security risk posture.
• Manage, administer, and support the GSA IT MFA environment.
• Manage, administer, and support ICAM systems and related support activities.
• Utilize automation and role-based management to ensure availability of access and continuity of services.
• Ensure requirements are gathered, processes defined, and use cases documented.
• Test and certify new product versions, bug fixes, and provide detailed reports.
• Provide on-call rotation support on a routine basis.
• Identify process improvement opportunities for review and subsequent implementation.
• Provide positive customer service interactions for all levels of the organization up to and including senior executive staff.
• Provide support and administration of the GSA IT AD environment, systems, and associated data.
• Continuously review and assess the GSA IT ICAM environment and provide recommendations for how to manage and administer the environment more efficiently.
• Ensure that all Group Policy Management (GPM) changes are controlled and documented.
• Perform other operational support duties as assigned.

Qualifications:

• Public Trust Clearance.
• ITILv4 Foundation Training and ITILv4 Foundation Certification, may be obtained within 120 days after hire.
• 7+ year experience with IDMS systems.
• Minimum of 2 years engineering and supporting Okta solutions.
• Subject matter expertise engineering and supporting Okta.
• Possesses and applies a comprehensive knowledge across key tasks and high-impact assignments.
• Plans and leads major technology assignments.
• Evaluates performance results and recommends major changes affecting short-term project growth and success.
• Functions as a technical expert across multiple project assignments.
• Design and develop solutions to complex applications problems, system administration issues, or network concerns.
• Perform systems management and integration functions.
• Proven ability to work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others.
• Possess the ability to communicate in both oral and written forms, demonstrating an ability to communicate effectively with all levels of staff as well as clients.
• Maintain standard working hours per the DIGIT contract and be available for meetings and other collaborative efforts during working hours.
• Demonstrated ability to apply comprehensive knowledge across key tasks and high-impact assignments with the ability to use practical experience and training to determine how to accomplish tasks.

Desired Qualifications:

• Okta certified.
• Strong knowledge of the different identity and access management (IAM) concepts, technologies, and authentication protocols.
• Intimately familiar with IAM-related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID, and REST APIs, and other security interfaces.
• Strong experience with Directories, SSO, Federation, Delegated Administration, API Gateways, and SOA services.
• Active Directory, including but not limited to:
• Microsoft Active Directory.
• Azure Active Directory.
• NetIQ DRA.
• NetIQ Group Policy Administrator (GPA).
• Active Directory Lightweight Directory Services.
• Vulnerability Mitigation.
• Identity Management services operations, including but not limited to:
• SailPoint IdentityIQ.
• SecureAuth.
• SAML 2.0.
• Forefront Identity Manager/Microsoft Identity Manager.
• Active Directory Federation Services.
• Experience with Splunk engineering and administration.
• Privileged access management (PAM) systems such as CyberArk.
• Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).
• Experience with SailPoint IdentityIQ integration and operations.
• Experience with network architecture.
• Powershell, Java, and .NET scripting.
• An understanding of Zero Trust concepts.
• Security+ certification.
• Proficiency in the Google Suite (Gmail, Calendar, Chat, Meet, Docs, Slides, Sheets), Microsoft Office (Word, Excel, PowerPoint, Outlook), Slack, and ServiceNow.

Education and Experience:

• The following are the education and experience required for this position:
• 7-12 years of experience and a Bachelor's degree or equivalent.
• Preference: Master's degree in a computer science-related field.
• 3+ direct years of experience engineering and providing operations support for Okta SSO solutions.
• Hands-on experience migrating applications to implement Okta.
• Experience as a remote worker demonstrating time management and self-discipline with cultural change management and Agile mindset.