Software Web Developer IV (CAPE RES)

PenBay Technology Group • Alexandria, VA

14h • Onsite

About The Position

PenBay Technology Group is seeking to hire a Software Developer, Identity and Access Management Specialist to support the Resource Enterprise Services (RES) for Program Resources and Information Systems Management Division (PRISM), for the Office of the Secretary of War (OSW), Cost Assessment and Program Evaluation (CAPE). The PRISM division is responsible for maintaining business applications to support matters relating to the planning and programming phases of the Planning, Programming, Budgeting, and Execution (PPBE) and the preparation of material and guidance for such systems as PPBE is the Department of Defense (DOD) process for allocating resources. The Software Developer, Identity and Access Management will: Design and develop a secure authentication and authorization system, with a focus on Security Assertion Markup Language (SAML), single sign-on (SSO), and other Identity and Access Management (IAM) protocols like OAuth and OpenID Connect. Collaborate with teams: Work with product owners, security teams, and other engineers to gather requirements and implement features. Write clean and scalable code: Adhere to best practices for code quality, including code reviews and unit testing, to ensure maintainability and efficiency. Work in an engineering environment focusing on engineering and/or scientific studies and analysis providing technical solutions. Provide design, implementation, testing services for complex information systems with attention to performance, scalability and security. Collaborate with cross-functional teams, including database administrators, system administrators, and quality assurance teams, to ensure smooth application deployments and operations. This is a Full-time, ON-SITE position.

Requirements

• Practical, hands-on experience implementing and supporting the Service Provider (SP) side of federated identity management in production environments.
• Bachelor's Degree & 2+ years of experience.
• Active Interim Secret Clearance; Must be able to obtain and maintain a Secret Level Clearance.
• Demonstrated real-world experience with at least several of the following: Configuring Service Provider trust relationships using SAML 2.0 and/or OAuth 2.0 / OpenID Connect.
• Setting up and troubleshooting SP-initiated or IdP-initiated SSO flows.
• Integrating applications/web servers (e.g., Apache, IIS, Oracle HTTP Server, F5 APM, etc.) with external Identity Providers.
• Consuming and mapping assertions/attributes from common enterprise IdPs (Key Cloak, Okta, Azure AD, PingFederate, ADFS, Oracle Identity Management, etc.).
• Working with SAML metadata, signing/encryption certificates, and attribute release policies from the SP perspective.
• Certification Requirement: DoD 8570.01-M Level II IA certification or able to obtain within 30 days of start.

Responsibilities

• Design and develop a secure authentication and authorization system, with a focus on Security Assertion Markup Language (SAML), single sign-on (SSO), and other Identity and Access Management (IAM) protocols like OAuth and OpenID Connect.
• Collaborate with teams: Work with product owners, security teams, and other engineers to gather requirements and implement features.
• Write clean and scalable code: Adhere to best practices for code quality, including code reviews and unit testing, to ensure maintainability and efficiency.
• Work in an engineering environment focusing on engineering and/or scientific studies and analysis providing technical solutions.
• Provide design, implementation, testing services for complex information systems with attention to performance, scalability and security.
• Collaborate with cross-functional teams, including database administrators, system administrators, and quality assurance teams, to ensure smooth application deployments and operations.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level