Identity and Directory Management Services

We are seeking a Identity and Directory Management Services (IDMS) Senior Engineer with expertise with Okta and a focus on the migration of applications to using Okta. This includes the design, administration, management, execution & maintenance of GSA's Identity & Directory Management Services (IDMS) and Identity, Credential, and Access Management (ICAM) solutions to meet the needs of the enterprise users & the enterprise architecture.

The team is comprised of the best-in-class technology partners to leverage forward-leaning technologies and best practices to transform GSA's IT capabilities and shift offerings to provide a more flexible service delivery model, completing the agency's shift to a fully digital experience along with its adoption of advanced, emerging technologies such as intelligent automation, artificial intelligence, and machine learning.

Requirements:

This position shall perform the following (to include but not limited to) activities

• Extensive experience with Okta includes installation, configuration and migrations.
• Migrate applications using JBOSS, .NET, PHP, Java and Apache to Okta.
• Troubleshoot advanced problems within the Okta IdP by using tools such as SAML tracer, Fiddler and other similar tools.
• Integrate applications with SAML, OpenID Connect, RADIUS and Oauth.
• Integrate applications with Multi Factor Authentication.
• Integrate applications with Password less Authentication.
• Provide advanced support for IAM/SSO/MFA by troubleshooting a variety of difficult software problems, implementing bug fixes, and performing root cause analysis using agile methodologies.
• Strong communication skills with customers over phone, email, or ticketing system.
• Implement technical capabilities including IAM solutions and application integrations, to enhance enterprise security risk posture.
• Manage, administer, and support the GSA IT MFA environment.
• Manage, administer, and support ICAM systems and related support activ+ities.
• Utilize automation and role-based management to ensure availability of access and continuity of services.
• Identifying process improvement opportunities for review and subsequent implementation.
• Providing positive customer service interactions for all levels of the organization up to and include senior executive staff.
• Ensure that all Group Policy Management (GPM) changes are controlled and documented.
• Other operational support duties as assigned.
• Participating in meetings with executives to discuss technical issues and propose solutions
• Collaborating with other members of the engineering team to design new features or improve existing ones
• Escalate issues to vendor and third-party entities, as necessary and directed by the Government.

Contract Required Qualifications:

This following are REQUIRED for this position:

• Public Trust Clearance
• ITILv4 Foundation Training and ITILv4 Foundation Certification, may be obtained within 120 days after hire.
• 7+ year experience with IDMS systems.
• Familiarity working with JBOSS, .NET, PHP, Java and Apache.
• Previous experience migrating systems to Okta with a focus on the applications.
• Minimum of 3 years engineering and supporting Okta solutions.
• Evaluates performance results and recommends major changes affecting short-term project growth and success.
• Functions as a technical expert across multiple project assignments.
• Design and develop solutions to complex applications problems, system administration issues, or network concerns.
• Proven ability to work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others.
• Possess the ability to communicate in both oral and written forms, demonstrating an ability to communicate effectively with all levels of staff as well as clients.
• Maintain standard working hours per the DIGIT contract and to be available for meetings, and other collaborative efforts during Eastern Standard TIme working hours.
• Demonstrated ability to apply comprehensive knowledge across key tasks and high impact assignments with the ability to use practical experience and training to determine how to accomplish tasks.

The following are DESIRED for this position:

• Strong knowledge of the different identity and access management (IAM) concepts, technologies and authentication protocols.
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces.
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
• Active Directory including but not limited to:
  • Microsoft Active Directory
  • Azure Active Directory
  • NetIQ DRA
  • NetIQ Group Policy Administrator (GPA)
  • Active Directory Lightweight Directory Services
  • Vulnerability Mitigation
• Identity Management services operations including but not limited to:
  • SailPoint IdentityIQ
  • SecureAuth
  • SAML 2.0
  • Forefront Identity Manager/Microsoft Identity Manager
  • Active Directory Federation Services
• Experience with Splunk engineering and administration.
• Privileged access management (PAM) systems such as CyberArk.
• Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).
• Experience with SailPoint IdentityIQ integration and operations.
• Experience with network architecture.
• Powershell, java and .NET scripting.
• An understanding of Zero Trust concepts.
• Proficiency in the Google Suite (Gmail, Calendar, Chat, Meet, Docs, Slides, Sheets), Slack, and ServiceNow.
• Must be willing to work a variety of shifts, including holidays and weekends as scheduled.

The following are the education and experience required for this position:

• 7-12 years of experience and bachelor's degree or equivalent.
• Preference Masters degree in a computer science related field.
• 3+ direct years of experience engineering and providing operations support for Okta SSO solutions.
• Hands-on experience migrating applications to implement Okta.
• Experience as a remote worker demonstrating time management and self discipline with cultural change management and Agile mindset.

The physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to do the following:

• If remote, maintain home workspace in a safe manner, free from safety hazards and in line with information security policies.
• Communicate verbally in person, over the phone or by video chat and clearly/succinctly in writing, primarily utilizing a keyboard.
• Appear on camera for meetings with co-workers and government partners via video chat and ensure the protection of proprietary company and customer information is consistent with the company's expectation of information security.
• Viewing computer screens and sitting for long periods of time.
• Travel is not required.

GovTact and Insperity provide equal employment opportunities to all employees and applicants in all company facilities without regard to race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, (or related medical conditions, including, but not limited to lactation), physical disability, mental and/or intellectual disability, age, military status or status as a Vietnam-era or special disabled veteran, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws.

This applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.