Cybersecurity Engineering and Operations III

NASA Jet Propulsion Laboratory

5d•$134,056 - $160,160

About The Position

The Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office at JPL is hiring an Enterprise Cybersecurity Engineer III. The role designs, supports, and improves identity management and directory access systems for business, flight/mission, and institutional networks. It includes work on Active Directory, LDAP, authentication and federation services, certificate services, directory integrations, and automation, as well as technical support and coordination with internal organizations.

Requirements

Typically requires a bachelor’s degree in computer science or a similar discipline and at least 6 years of related experience; or a master’s degree in a similar discipline and at least 4 years of related experience; or a PhD in a similar discipline and at least 2 years of related experience.
Experience with Windows systems administration (Server 2016/2019/2022) and UNIX environments.
Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management system improvements.
Strong understanding of LDAP schema, directory trees, and configuration of LDAP-based authentication for third-party applications.
Knowledge of advanced principles and techniques for securing networked computer systems, including Least Privilege and Tiered Administration.
Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
Experience architecting scalable systems and skill in creating data flow diagrams, data dictionaries, and technical requirements documentation.
Excellent written and verbal communication skills, with the ability to lead aspects of technical project development and create user guides or tutorials.

Nice To Haves

Familiarity with Laboratory and NASA policies, such as NIST 800-53 and FIPS 201.
Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
Understanding of business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication.

Responsibilities

Assist in developing and designing conceptual and detailed system solutions for Identity Management and Directory access requirements across business, flight/mission, and institutional networks.
Analyze and create design concepts, architecture diagrams, and functional and technical requirements for SSO, LDAP, Kerberos, and NTLM authentication.
Assist in managing, upgrading, and maintaining JPL’s Active Directory infrastructure to ensure security, integrity, and availability.
Design and implement Active Directory Group Policies in compliance with cybersecurity policies.
Manage Windows DNS servers for Active Directory zones and WINS servers for NetBIOS records.
Perform domain renames and Active Directory migrations for infrastructure reconstruction.
Integrate NASA PIV smart card authentication with Active Directory to comply with HSPD-12.
Design and implement Windows Certificate Services (PKI) and Active Directory Federation Services (ADFS) to enable Web SSO for SAML-compliant applications.
Provide technical support for Samba server integration with Active Directory and configure Oracle Access Manager WebGate to integrate with the JPLIT directory service.
Develop and implement PowerShell and Visual Basic scripts for automated Active Directory data management and reporting.
Work with internal organizations to document requirements and present system concepts.
Provide Level 3 technical support to developers and customers for complex Windows directory and LDAP-related issues.
Support analysis of system enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems.
Document and track changes using configuration management systems.