IAM Access Gateway Engineer

About the role

The mission of the Federal Reserve System is to foster the stability, integrity, and efficiency of the nation's monetary, financial, and payments systems to promote optimal economic performance. Within this broad context the vital mission of the National IT Services is to deliver superior value to our customers through world-class IT services and solutions that are responsive to business needs, adaptive to change, and essential to the mission of the Federal Reserve System.

Access gateway Engineer uses technology to improve, streamline and automate information technology systems and services. The eBusiness Security Access Gateway team is seeking an automation engineer to join a team of security engineers to create and improve Infrastructure and Configuration as Code (IaC and CaC). The Access gateway Engineer will collaborate with the eBusiness engineering team to understand secure Authentication, Authorization, Web Gateway, and API services to reduce manual processes, build CI/CD pipelines, and reduce overall time to market.

Responsibilities

• Assist with further development of automated deployments inclusive of IBM Security Products
• Design and develop the code required to build and maintain Access Management Services
• Enhance and develop stronger automation processes, including full CI/CD pipelines, around the various Access Gateway environments, leading to less manual execution of scripts
• Allow administrators to focus on code rather than procedures
• Improve Change Management (CM) practices by ensuring all changes are captured in source control
• Enable automated rebuilds rehydrating environments and rapid recovery from ransomware or other critical incidents
• Improve existing processes and create new automated health checks
• Reduce time spent by administrators doing manual tasks, reducing errors, integration with CM, integrate system monitoring for auto incident creation, self-healing based on environmental health, and streamlining work intake requests by integrating with Service Now
• Enable "no touch deployment" to further reduce time to market
• Share knowledge and continuously seek improvement opportunities

Qualifications

• Bachelor's Degree or equivalent experience; Master's Degree may be preferred
• 5+ years of relevant work experience
• US Citizenship or US Permanent Resident status is required

Required skills

• Ansible Tower
• GitLab
• Python
• OpenShift and/or Kubernetes
• Unix/Linux Shell scripting
• Identity and Access Management Systems (IAM)
• Experience with RESTful APIs
• Argo CD
• Agile

Preferred skills

• Knowledge of modern authentication and authorization protocols including: OAuth 2.0, Open ID Connect (OIDC), Federation (SAML 2.0), System for Cross-domain Identity Management (SCIM), and Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• JavaScript
• ServiceNow
• PKI Experience
• RedHat Enterprise Linux (RHEL)
• Ansible Automation Hub and Ansible Galaxy
• Nexus

Working conditions

• Requires use of standard office equipment such as computers, phones, photocopiers, etc.
• Requires some degree of sitting (for prolonged periods of time), standing, lifting, carrying, pushing, pulling less than 20 lbs.
• May require extended work hours
• Occasional travel including overnight stays may be necessary

Benefits

• Medical, dental, vision, life, disability, and other insurance plans
• ESPP (employee stock purchase program)
• 401K program with company match after 12 months of tenure
• HSA (Health Savings Account on the HDHP plan)
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions
• Corporate discount savings program and other discounts
• On-demand training program
• Access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure
• Certification discounts and perks to associations including CompTIA and IIBA
• Dedicated customer service team for Consultants
• Certified Career Coach