Senior/Principal Solutions Architect - Enterprise Management Services, Hybrid
Sandia National Laboratories · Albuquerque, NM · 3 days ago
Engineering$118k–$236k/yrFull-time
About the role
We are seeking an experienced Solutions Architect to join our dynamic team responsible for managing a large-scale enterprise Product Data Management (PDM) system. This system delivers best-in-class engineering solutions that support our Nuclear Deterrence (ND) and Nuclear Security Enterprise (NSE) customers.
Responsibilities
- Lead architecture and implementation of Identity Management solutions using SailPoint IdentityIQ, ForgeRock IDM, Ping Federate, and related technologies.
- Manage identity provisioning, lifecycle, and account/group management applications.
- Develop automation scripts (PowerShell, Java, Python, C++) to optimize processes and ensure data integrity.
- Oversee vulnerability patch management and SSL/SSO certificate lifecycle for IAM environments.
- Collaborate with cross-functional teams to design and improve IAM workflows and automation.
- Maintain documentation related to IAM processes, policies, and system configurations.
- Monitor production services and respond to system issues promptly.
- Ensure compliance with NIST protocols and DOE security standards.
- Collaborate with infrastructure, application, and governance teams to support enterprise identity services.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
- Plus a minimum 5 years of experience in Identity Access Management.
- Advanced knowledge in at least one of the following solutions: SailPoint IdentityIQ, ForgeRock IDM, Ping Federate or EntraID.
- Strong scripting/programming skills in PowerShell, Java, Python, or C++.
- Red Hat Enterprise Linux experience.
Qualifications
- Understanding of identity federation methodologies and configurations.
- Excellent communication and collaboration skills.
- Experience with secure EntraID identity solutions with Conditional Access policies.
- Advanced knowledge of identity federation, HTTP, XML, REST, SCIM protocols.
- Experience with web application development frameworks (Angular, React).
- Strong understanding of encryption algorithms and security best practices.
- Understanding of authentication protocols (SAML, OAuth, OpenID Connect) and directory services (LDAP).
- Experience managing identities in cloud platforms (AWS IAM, Azure AD, Google Cloud IAM).