Cleared Senior/Principal Solutions Architect - Enterprise Management Services, Onsite

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

Are you passionate about leveraging innovative technologies to enhance security solutions? Do you want to be part of a dynamic team that tackles complex challenges critical to national security? If so, we are looking for a highly motivated individual to join our team as a Solutions Architect specializing in Identity Access Management (IAM).

In this role, you will be responsible for the architecture and implementing the Identity and Access Management technology platforms, processes, operations, and integrations essential for supporting a multi-site, secure collaboration network. You will work closely with stakeholders to understand business, security, and technical requirements, driving improvements to existing solutions. Collaborating with infrastructure, application, and governance partners across the Nuclear Security Enterprise, you will define information system requirements to implement and support highly available, resilient solutions that enhance user experience.

On any given day, you may be called on to:

• Provide Web, REST API Single Sign-On authentication and authorization services by integrating with Access Manager.
• Work with developers to enable applications for authentication and authorization services.
• Monitor production services and respond to system problems and user issues.
• Architect Access Management solutions using industry best practices and proven methodologies.
• Provide technical assistance, training, and/or mentoring to others in the areas of authentication and authorization services.
• Participate in development of new processes and serve as a primary technical point of contact with sponsors and stakeholders.
• Exercise independent judgement to define, develop, and implement original solutions to complex problems of a broad and diverse scope at the team, directorate, or institutional level.
• Red Hat Enterprise Linux experience.

* Due to the nature of the work, the selected applicant must be able to work onsite 75% of the time.

$117,500 - $235,700

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Bachelor's degree in Computer Science, Management Information Systems, or related field, plus 5 years of relevant experience; or equivalent (AS + 9 years or no degree + 13 years).
• DOE Q security clearance required to start.

• Strong understanding of identity and access management principles and practices.
• Advanced knowledge of encryption algorithms and security protocols (RSA, SSL, TLS), as well as security vulnerability, ForgeRock, ADFS, Ping Federate, and other On Prem IDP Stacks.
• Knowledge in HTTP, XML, AJAX, REST, SCIM.
• Experience in web-based application development using HTML5, JavaScript, and frameworks like Angular or React.
• Experience working with databases (Oracle, MySQL, SQL Server, MongoDB, etc.)
• Understanding of identity federation methodologies and configurations.
• Familiarity with Ansible configuration and scripting.
• Experience with ForgeRock or Ping service integration such as AM, DS and IDM.

Department 9784 Enterprise Management Services is a trusted efficient IT services provider and technology partner. Our standard is to deliver critical reliable services to our customers in Mobile Classified Computing, Corporate Enterprise Backups, ESN Operations, ESN Supply Chain & Software Assurance, and Control M Batch Schedule Application.

This posting will be open for application submissions for a minimum of seven (7) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Position requires a Department of Energy (DOE) Q security clearance to start, or equivalent active security clearance with another U.S. government agency (e.g., DOD). Sandia is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.