Access Management Administrator

About the role

This position supports both PingAM and Active Directory Federated Services (ADFS) access management solutions in a private cloud environment. The role involves maintaining the existing PingAM stack while assisting with the integration and adoption of ADFS.

Responsibilities

• Design, implement, and maintain tailored Access Management solutions using PingAM and ADFS.
• Collaborate with cross-site teams to integrate PingAM and ADFS into diverse systems and applications, leveraging expertise in SAML, OAuth2 and OIDC.
• Develop and implement strategies for single sign-on (SSO) and access management.
• Ensure high availability and disaster recovery capabilities for PingAM Services.
• Leverage orchestration/automation utilities (e.g. Gitlab, Amster, Ansible, etc.) to standardize configurations, support patching, and support upgrades across multiple sites.
• Provide systems administration support in both Linux and Windows environments, ensuring proper security compliance, patch level, and adherence to our configuration management standards.
• Enforce security and systems administration policy requirements such as vulnerability remediation, and system build standards.
• Perform other duties as assigned.

Qualifications

• Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
• Bachelor’s degree in Computer Science, or related field; or the equivalent combination of education and related work experience.
• Fundamental experience in operationally managing application authentication software such as PingAM, PingDS or ADFS.
• Basic understanding of software security fundamentals such as SSL certificates, group-based access control, role-based access control, firewalls & network security.
• Experience administering Linux and Windows operating systems using command line tools, including performing routine system wellness checks, accessing remote servers, reviewing error logs, and basic troubleshooting.
• Fundamental experience with authentication and authorization protocols (SAML2, OIDC, OAuth2).
• Strong analytical skills for troubleshooting and analyzing complex systems and networks.
• Excellent verbal and written communication skills necessary to effectively collaborate in a team environment and present and explain technical information.

Pay

The starting salary range for this position is $121,830 - $154,500 Annually for the SES.1 level and $146,340 - $185,544 Annually for the SES.2 level. The actual salary offered will depend on the candidate's qualifications and experience.

Benefits

Lawrence Livermore National Laboratory offers a comprehensive benefits package including:

• Flexible Benefits Package
• 401(k)
• Relocation Assistance
• Education Reimbursement Program
• Flexible schedules

Additional Information

#LI-Hybrid

This is a Career Indefinite position, open to Lab employees and external candidates.