Senior Identity & Access Management (IAM) Engineer

COMPANY OVERVIEW

XCEL Engineering Inc. is an award-winning small business that provides trusted information technology engineering consulting and project management solutions and services to federal agencies and organizations. Originally founded in 1971 by professional engineers at the University of Tennessee XCEL was acquired in 2003 by U.S. Army and Navy veterans and in 2023 became a MartinFed company.

XCEL Engineering is a part of IT Lab Partners (ITLP) which was created to support a leading research facility in the East Tennessee region in recruiting the best and the brightest technical talent. Considering joining our impressive team today!

JOB OVERVIEW

XCEL Engineering is seeking a qualified applicant for a Senior Identity and Access Management Engineering for the American Science Cloud. AmSC is a secure federated and science-optimized cloud environment that integrates the DOEs world-leading computing and experimental facilities data resources and high-performance networks. The AmSC platform enables DOE scientists to create access and integrate world-class AI-ready datasets run scalable model training on leadership-class systems perform distributed simulations control instruments and move data efficiently across sites.

ESSENTIAL FUNCTIONS

• Lead the architecture development and implementation of an Identity and Access Management platform using the Ping suite of products
• Contribute to workflow design API development and collaborate with application developers and owners to establish robust integrations
• Plan execute and document application onboarding of a diverse and growing application set
• Collaborate with IAM personnel from other organizations to design build and administer a federation hub allowing users to access resources at any participating facility
• Build out and enable ABAC RBAC least privilege access and other common IAM standards
• Deploy configure and support identity and access management services such as single sign on (SSO) OAuth MFA zero trust etc....
• Lead incident response providing advanced troubleshooting and building out of monitoring and alerting systems
• Define and implement define KPIs processes and drive continuous improvement.
• Participate in on-call rotation providing 24-hour 7-day support and off-hours maintenance windows.
• Coordinate with vendors to resolve hardware and software problems.
• Deliver AmSCs mission by aligning behaviors priorities and interactions with our core values of Impact Integrity Teamwork Safety and Service. Promote diversity equity inclusion and accessibility by fostering a respectful workplace - in how we treat one another work together and measure success.

BASIC QUALIFICATIONS

• United States citizen with the ability to obtain a security clearance.
• Bachelors degree in Information Technology IT Operations Management or a related field.

DESIRED QUALIFICATIONS

• Extensive experience in Identity and Access Management supporting SSO OAuth MFA and API development
• Excellent interpersonal/communication skills and the ability to work as part of a team.
• Proven track record leading and driving the delivery of large complex IAM projects
• Strong experience with the Ping suite of IAM products bonus points for Ping Government Identity Cloud experience
• Extensive experience with web authentication implementation such as SAML OAuth API-token REST etc....
• Experience in directory services and directory structure specifically using LDAP and/or PingDirectory
• Experience implementing RBAC and ABAC in complex enterprise environments
• Strong experience in identity federation design and implementation using standards like OIDC and SAML to manage user identities across disparate systems
• Experience with Automation and scripting (Python etc...) for IAM tasks
• Working knowledge of cloud application architecture patterns and a thorough grasp of common products and managed services for at least one Cloud Service Provider (e.g. AWS)
• Working knowledge of Unix system fundamentals and common network protocols.
• Solid understanding of cloud computing networking concepts.
• Ability to proactively identify performance issues problems and areas for improvement.
• Ability to identify requirements and to define plan and implement requisite solutions.
• An understanding of code review and familiarity with tools like GitHub and GitLab
• Experience using tools such as Nagios Grafana and Prometheus to monitor systems metrics and create dashboards.

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

• Inside office environment.
• Working on a computer for long periods of time.
• May involve long period of sitting at a desk.
• The work environment is fast-paced and sometimes involves extreme deadline pressures.

OTHER DUTIES

This job description is not designed to cover or contain a comprehensive listing of activities duties or responsibilities that are required of the employee for this job. Duties responsibilities and activities may change at any time with or without notice.

Xcel Engineering is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race color religion religious creed gender sexual orientation gender identity gender expression transgender pregnancy marital status national origin ancestry citizenship status age disability protected Veteran Status genetics or any other characteristics protected by applicable federal state or local law.

If you are a qualified individual with a disability or disabled veteran you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Xcel Engineerings current openings as a result of your disability. You can request reasonable accommodations by calling 855.212.1810. Thank you for your interest in Xcel Engineering.

All positions at Xcel Engineering Inc. are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment addition Xcel Engineering is an E-Verify employer.

Required Experience:

Senior IC