Cybersecurity Engineering and Operations III

JPL/NASA • Pasadena, CA

4d • $134,056 - $160,160

About The Position

JPL’s Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office is seeking an Enterprise Cybersecurity Engineer III. The role designs, implements, maintains, and supports identity management and directory access solutions for business, flight/mission, and institutional networks. It includes work across Active Directory, LDAP, authentication and single sign-on technologies, Windows certificate services, and integrations with other directory and access-management systems.

The engineer develops system concepts, architectures, diagrams, and requirements; supports Active Directory infrastructure and related services; automates data management and reporting; and provides Level 3 support for complex directory and authentication issues. The role also works with internal organizations to document requirements, analyze system enhancements and upgrades, and track changes through configuration management systems.

Requirements

• Typically requires a bachelor’s degree in computer science or a similar discipline and at least 6 years of related experience; or a master’s degree in a similar discipline and at least 4 years of related experience; or a PhD in a similar discipline and at least 2 years of related experience.
• Experience administering Windows systems, including Server 2016, 2019, or 2022, and working in UNIX environments.
• Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management system improvements.
• Strong understanding of LDAP schema and directory trees, and configuration of LDAP-based authentication for third-party applications.
• Knowledge of advanced principles and techniques for securing networked computer systems, including Least Privilege and Tiered Administration.
• Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
• Experience architecting scalable systems and creating data flow diagrams, data dictionaries, and technical requirements documentation.
• Excellent written and verbal communication skills, with the ability to lead aspects of technical project development and create user guides or tutorials.

Nice To Haves

• Familiarity with Laboratory and NASA policies, such as NIST 800-53 and FIPS 201.
• Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
• Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
• Understanding of business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication.

Responsibilities

• Assist in developing and designing conceptual and detailed system solutions for Identity Management and Directory access requirements across business, flight/mission, and institutional networks.
• Analyze and create design concepts, architecture diagrams, and functional and technical requirements for SSO, LDAP, Kerberos, and NTLM authentication.
• Help manage, upgrade, and maintain JPL’s Active Directory infrastructure to ensure security, integrity, and availability.
• Design and implement Active Directory Group Policies in compliance with cybersecurity policies.
• Manage Windows DNS servers for Active Directory zones and WINS servers for NetBIOS records.
• Perform domain renames and Active Directory migrations for infrastructure reconstruction.
• Integrate NASA PIV smart card authentication with Active Directory to comply with HSPD-12.
• Design and implement Windows Certificate Services and Active Directory Federation Services for Web SSO with SAML-compliant applications.
• Support Samba server integration with Active Directory and configure Oracle Access Manager WebGate for integration with the JPLIT directory service.
• Develop and implement PowerShell and Visual Basic scripts for automated Active Directory data management and reporting.
• Work with internal organizations to document requirements and present system concepts.
• Provide Level 3 technical support to developers and customers for complex Windows directory and LDAP-related issues.
• Support analysis of system enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems.
• Document and track changes using configuration management systems.

Benefits

• Health, dental, vision, wellbeing, and retirement plans.
• Paid time off.
• Learning opportunities.
• Rideshare benefits.
• Childcare benefits.
• Flexible schedule.
• Parental leave.
• Work-life balance focus.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level