System Architect - 2154

Responsibilities

The System Architect will support Enterprise Management Services at a major Department of Energy Laboratory in Albuquerque, providing trusted efficient IT services and technology to partner organizations. The standard is to deliver critical reliable services to the customers in Mobile Classified Computing, Corporate Enterprise Backups, ESN Operations, ESN Supply Chaing and Software Assurance and Control M Batch Schedule Application.
The System Architect will be responsible for architecting and implementing the identity and Access Management technology platforms, processes, operations, and integrations essential for supporting a multi-site, secure collaboration network. Will work closely with stakeholders to understand business, security, and technical requirements, driving improvements to existing solutions. Collaborating with infrastructure, application, and governance partners across the Nuclear Security Enterprise, will define information system requirements to implement and support highly available, resilient solutions that enhance user experience.
On any given day, you may be called to:
- Provide Web, REST API Single Sign-On authentication and authorization services by integrating with Access Manager.
- Work with developers to enable applications for authentication and authentication services.
- Monitor production services and respond to system problems and user issues.
- Architect Access Management solutions using industry's best practices and proven methodologies.
- Provide technical assistance, training, and/or mentoring to others in the areas of authentication and authorization services.
- Participate in the development of new processes and serve as a primary technical point of contact with sponsors and stakeholders.
- Exercise independent judgement to define, develop, and implement original solutions to complex problems of a broad and diverse scope at the team, directorate, or institutional level.
- Due to the nature of the work the selected applicant must be able to work onsite 75% of the time.

Qualifications

- Bachelor's degree in Computer Science: Management Information Systems, or a related field plus 7 years' job-related experience. In lieu of a degree, 13 years of job-related experience is required.
- Ability to obtain and maintain DOE Q Clearance.
- Must be a US Citizen

Required Skills:
- Knowledge of fundamental networking and distributed computing concepts, as well as security engineering, application security, and system security principles.
- Broad knowledge in one or more of the following areas (LDAP, PKI, RSA SecureID, CDSSO, SAML2, OAuth/OIDC, and other Claims based authentication).
- Proficient programming skills in at least one of the major languages: JACA, C++, Python, JavaScript, .NET.
- Experience in Linux OS and Windows Development environments.
- Effective analytical and problem-solving skills contribute to creative solutions to moderately complex problems on the server side.
- Proficient verbal and written communication skills necessary to work effectively with application developers, system programmers, and other technical staff.

Desired skills:
- Strong understanding of identity and access management principles and practices.
- Advanced knowledge of encryption algorithms and security protocols (RSA, SSL, TLS), as well as security vulnerability, ForgeRock, ADFS, Ping Federate, and other On Prem IDP Stacks.
- Knowledge in HTTP, SML, AJAX, REST, SCIM.
- Experience in web-based application development using HTMLS, JavaScript, and frameworks like Angular or React.
- Experience working with databases (Oracle, MySQL, SQL Server, MongoDB, etc.)
- Understanding of identity federation methodologies and configurations.