Access Management Administrator

LLNL•Livermore, CA

5d•Hybrid

About The Position

Lawrence Livermore National Laboratory (LLNL) is seeking an Access Management (AM) Administrator to support PingAM and Active Directory Federated Services (ADFS) access management solutions in a private cloud environment. This role involves maintaining the existing PingAM stack and assisting with the integration and adoption of ADFS. The position requires collaboration with cross-functional teams to implement and support identity and access management solutions, contribute to infrastructure modernization, and address technical challenges. This role is part of the IT Solutions (ITS) Division within the Computing Directorate, supporting the NNSA Enterprise Secure Network (ESN) program. A hybrid schedule may be offered after a probationary period, with specifics varying based on team and organizational needs. The position can be filled at either the SES.1 or SES.2 level, with additional responsibilities assigned at the higher level.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
Bachelor’s degree in Computer Science, or related field; or the equivalent combination of education and related work experience.
Fundamental experience in operationally managing application authentication software such as PingAM, PingDS or ADFS
Basic understanding of software security fundamentals such as SSL certificates, group-based access control, role-based access control, firewalls & network security.
Experience administering Linux and Windows operating systems using command line tools, including performing routine system wellness checks, accessing remote servers, reviewing error logs, and basic troubleshooting.
Fundamental experience with authentication and authorization protocols (SAML2, OIDC, OAuth2).
Strong analytical skills for troubleshooting and analyzing complex systems and networks.
Excellent verbal and written communication skills necessary to effectively collaborate in a team environment and present and explain technical information.
Broad experience in operationally managing application authentication software, ensuring compliance with stringent Support Level Agreements that demand high availability (SES.2 level).
Comprehensive knowledge of access management services and Linux or Windows operating systems administration. This includes tasks such as layered product installation and configuration, performance tuning, networking, security policy enforcement, troubleshooting, monitoring, backup/archiving, and hardware management (SES.2 level).
Broad experience with cloud providers such as Amazon Web Services, Azure or Google Cloud Platform. Proficient understanding of topics such as virtual private clouds, scalability, high availability, containerization, and orchestration tools (SES.2 level).

Responsibilities

Design, implement, and maintain tailored Access Management solutions using PingAM and ADFS.
Collaborate with cross-site teams to integrate PingAM and ADFS into diverse systems and applications, leveraging expertise in SAML, OAuth2 and OIDC.
Develop and implement strategies for single sign-on (SSO) and access management.
Ensure high availability and disaster recovery capabilities for PingAM Services.
Leverage orchestration/automation utilities (e.g. Gitlab, Amster, Ansible, etc.) to standardize configurations, support patching, and support upgrades across multiple sites.
Provide systems administration support in both Linux and Windows environments, ensuring proper security compliance, patch level, and adherence to our configuration management standards.
Enforce security and systems administration policy requirements such as vulnerability remediation, and system build standards.
Perform other duties as assigned.
Manage multiple advanced parallel tasks and priorities of customers and stakeholders to ensure deadlines are met, while leveraging other team members’ skills (SES.2 level).
Apply technical expertise to solve complex technical problems and develop solutions using judgment in determining methods, techniques, and evaluation criteria (SES.2 level).
Develop tools and procedures to facilitate automation efforts as well as cross-platform/environment monitoring solutions both on-premise and using various cloud providers (SES.2 level).