IAM Linux Engineer

Oak Ridge National Laboratory•Oak Ridge, TN

5d•Onsite

About The Position

The High-Performance Computing Systems Section within the National Center for Computational Sciences (NCCS) is seeking an IAM Linux Engineer to join the HPC Infrastructure group. The preferred candidate will possess commensurate knowledge, skills and abilities in addition to relevant education, certifications, experience and demonstrated ability to work as a member of a team. NCCS provides state-of-the-art computational and data science infrastructure coupled with dedicated technical and scientific professionals tackling large-scale problems across a broad range of scientific domains for accelerating scientific discovery and engineering advances. NCCS hosts the Oak Ridge Leadership Computing Facility (OLCF), one of the Department of Energy’s (DOE) National User Facilities which operates Frontier, the nation’s first exascale supercomputer.

Requirements

Bachelor’s degree in computer science or closely relate field and a minimum of 2 years of experience in Linux systems administration and/or Identity Management, or a Master’s Degree and a minimum of 1 year of experience in Linux systems administration and/or Identity Management.
An equivalent combination of education and experience will be considered.

Nice To Haves

Excellent interpersonal/communication skills and the ability to work within a team
Foundational knowledge of modern authentication and authorization standards, including SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP.
Experience administering Kubernetes on on-premises infrastructure (K3s, RKE2, or similar)
Experience with GitOps tools and methodologies
Familiarity with managing user identities and group memberships in LDAP and Active Directory
Understanding of cloud-native IAM concepts (roles, policies, and service accounts) in platforms like AWS, Azure, or GCP.
Strong working knowledge of Linux system fundamentals and common network protocols
Programming and scripting skills in common languages such as Python and bash
Understanding of versioning and code review tools like GitHub and GitLab
Experience with configuration management tools such as Puppet or Ansible
Experience deploying and maintaining virtual environments using VMWare
Working knowledge of common infrastructure services such as OpenLDAP, DNS, DHCP, etc…
Ability to plan, prioritize and complete assigned projects with minimal supervision

Responsibilities

Deploy, configure and manage HPC-scale services in a Linux environment, primarily RedHat and Rocky
Assist in deploying, scaling and maintaining on-premise Kubernetes clusters
Perform regular patches, updates and backups
Monitor systems using tools like Nagios and Grafana
Respond to and assist in troubleshooting issues
Administration of RSA SecureID and PingFederate servers
Deploy, configure and support identity and access management services such as single-sign on (SSO), OAuth, two-factor auth, zero trust, etc…
Maintain and enable secure access for human users and automated workloads in kubernetes
IdM integration with user applications and Entra ID
Deploy and manage resources in the NCCS VMware environment
Automate systems administration tasks using tools like Puppet, Terraform and Ansible