ICAM Engineer

Remote

Grant Leading Technology is seeking a candidate for an ICAM Engineer to join our dynamic team. The candidate will write processes, issue logs, and root cause analysis. This person will be responsible for development, engineering, integration and implementation of single sign-on, provisioning/de-provisioning, and federation (SAML/WSFed) solutions for our clients. This position will be remote, and the hours are 8 am to 4:30 pm EST.

Responsibilities:

•Administer and engineer solutions with the following systems: Ping Federate and PingAccess or Radiant Logic, etc. 

•Gather user input to understand scenarios and develop detailed technical requirement documents to setup SSO connections via the IAM product.

•Work closely with clients during deployments, upgrades, and changes to ensure requirements are being met.

•Ensure the IAM product integrates successfully with various systems (such as Unix/Linux servers, Web Applications, IIS, Tomcat, Apache, Active Directory, single sign on (SSO), and relational databases.

•Create technical materials including internal and external tech notes, whitepapers, SOPs, and technical presentations.

•Integrate access management tools with third party and custom applications and troubleshooting relevant integration issues.

•Facilitate workflow customization to meet business requirements.

•Experience installing, upgrading and configuring identity and access management applications.

Qualifications and Education Requirements:

•Must have a bachelor’s degree. 

•Minimum 8 -10 years of applicable experience designing and implementing enterprise ICAM solutions.

•Extensive work experience with Ping Federate and PingAccess

•Experience with Single Sign-on technologies including Federation (SAML/WSFed) configuration / development / implementation.

•Experienced with deploying and configuring IDP and SP initiated connections.

•Experience with technologies such as SAML 2.0, OAuth 2.0, OpenID Connect, Role-Based Active Control (RBAC) and Active Based Access Control (ABAC). Additional experience with Active Directory, LDAP and Experience with platforms like OpenAM

•Experience with SQL databases

•Experience with compliance standards such as NIST 800-63-2 and 800-63-3, GDPR, HIPAA, PCI, FedRAMP, and FISMA.

•Ability to work in team-oriented environment where collaboration is encouraged and valued.

•Experience creating detail design documents. 

•Experience with Active Directory (AD) 

•Must be authorized to work in the U.S.

Preferred Skills:

•Experience with PKI, SSL Protocols and Online Certificate Status Protocol (OCSP)

•Experience with cloud-based architectures running on AWS, Azure, or similar platforms is preferred, but not required.

•Experience with federal government projects

Previous experience working for a federal government entity