Senior IAM Security Engineer MFA & Cloud Operations

About the role

The GN&T Network Security team has an opening for Engineer IV's in the Network Access team. This role focuses on the delivery, operational support, and scaling of Multi Factor Authentication (MFA) services.

Responsibilities

• Manage, configure, and maintain enterprise MFA platforms (such as Duo MFA, Okta, or Ping Identity).
• Implement and enforce adaptive, risk-based, and phishing-resistant MFA policies (including FIDO2/passkeys) across hybrid and cloud applications.
• Serve as a Tier 2/Tier 3 escalation point to investigate authentication failures, resolve complex access disruptions, and perform Root Cause Analysis (RCA).
• Build automated provisioning workflows and configuration management scripts (using Python, Bash, or Ansible) to streamline identity lifecycles and security patching.
• Maintain, upgrade, and optimize our proprietary in-house MFA service and Linux Virtual Machines hosted on Red Hat OpenShift / Kubernetes.
• Maintain and write Helm charts, OpenShift templates, and CI/CD pipelines (Jenkins, GitLab CI, or ArgoCD) for automated service delivery.

Requirements

• Bachelor’s degree or four or more years of work experience.
• Four or more years of relevant experience required, demonstrated through work experience and/or military experience.
• IAM Expertise – Deep knowledge and understanding of Identity protocols like LDAP, SAML, FIDO, OAuth, and OpenID Connect. Working experience with products like DUO, Okta.
• Automation & Scripting – Proficiency in developing automation tools using languages like python, bash, etc.
• Directory Services – Practical experience of LDAP directory server implementations.
• Linux Systems Administration: Deep knowledge of Linux operating systems, networking fundamentals (TCP/IP, DNS, Load Balancing), and container security.
• Operational Mindset: Strong background in incident tracking, log management, documentation (Confluence), and participating in on-call support rotations.
• Knowledge of Splunk. Ability to write splunk search language models, data models, and lookups for threat hunting.

Qualifications

• Knowledge of CI/CD Tools: Hands-on experience with declarative git-driven deployments (ArgoCD, Flux) and package management via Helm.
• Strong networking and cybersecurity knowledge and experience.
• Knowledge of Jumphost servers and their operational use.
• Experience with applications like Hashicorp vault to store credentials and secrets.
• Experience in developing Splunk SOAR to automate triage and response actions.
• Expert knowledge of LDAP, SAML, OAuth 2.0, and OIDC.
• Experience managing applications on kubernetes.
• Established track record in managing complex processes, driving results, and adapting to change.
• The ability to communicate effectively across all levels of the organization and educate peers and teams on security concepts and overall importance to the business.
• Knowledge of network-based, system-level, and application layer attacks and mitigation methods.
• Experience building relationships across business units.

Skills

• CI/CD Tools: Hands-on experience with declarative git-driven deployments (ArgoCD, Flux) and package management via Helm.
• Strong networking and cybersecurity knowledge and experience.
• Knowledge of Jumphost servers and their operational use.
• Experience with applications like Hashicorp vault to store credentials and secrets.
• Experience in developing Splunk SOAR to automate triage and response actions.
• Expert knowledge of LDAP, SAML, OAuth 2.0, and OIDC.
• Experience managing applications on kubernetes.
• Established track record in managing complex processes, driving results, and adapting to change.
• The ability to communicate effectively across all levels of the organization and educate peers and teams on security concepts and overall importance to the business.
• Knowledge of network-based, system-level, and application layer attacks and mitigation methods.
• Experience building relationships across business units.

Benefits

• Up to 15 days of vacation per year, which grows with additional service.
• Paid parental leave.
• Adoption assistance and tuition assistance.
• Group home & auto insurance.
• Basic life insurance, supplemental life insurance, AD&D insurance.
• Identity theft protection.
• Pet insurance.
• Up to 8 company paid holidays per year.
• Up to 6 personal days per year.
• Shift differential.
• Short and long term disability.
• Health and wellness benefits including medical, dental, vision, and wellness programs.
• Matched 401(k) savings plan.

Pay

$101,000.00 - $194,000.00 annually based on a full-time schedule.

Schedule

This is a hybrid role with a minimum of three days per week in the office and flexibility to work from home.