Sr. IT Systems Engineer

Palo Alto Networks•Reston, VA

1d•Onsite

About The Position

The Team Information Technology - Working at a high-tech cybersecurity company within Information Technology is a once-in-a-lifetime opportunity. You’ll join the brightest minds in technology, creating, building, and supporting tools and enabling our global teams on the front line of defense against cyberattacks. We’re connected by one mission but driven by the impact of that mission and what it means to protect our way of life in the digital age. Join a dynamic and fast-paced team of people who feel excited by the prospect of a challenge and feel a thrill at resolving technical gaps that inhibit productivity. Palo Alto Networks is looking for a talented Senior IT Systems Engineer, Identity & Access Management who will be responsible for maintainability, build and configuration of user identity & authentication services, single sign on (SSO) and access automation. The ideal candidate enjoys working in a fast-paced environment with highly innovative technologies and will make a big impact in this highly visible role strengthening our identity services.

Requirements

Due to the nature of this project/government contract, this position requires US Citizenship
Must be located in Reston, VA or Dallas, Tx to be onsite.
3+ years of hands-on experience in managing and supporting identity & access technologies, like Okta, Azure AD, Ping Identity, CyberArk
Very strong knowledge of SSO, MFA and user identity management domain
Advanced understanding of SAML, OAuth, and SCIM standards and protocols and practical knowledge of their implementation
Ability to work cross-functionally across multiple business units, such as IT application, infrastructure, and product development teams
Strong technical writing skills to support required documentation
Bachelors/Masters degree in Computer Science, Information Technology or technical stream with the equivalent combination of work experience or equivalent military experience required

Nice To Haves

Knowledge of directory services, preferably active directory
Familiarity with privileged access management platforms
Hands on experience with cloud provides (GCP/ AWS)
Strong scripting / automation skills in Python / Bash /Go

Responsibilities

Implement and support the SSO. MFA and user access provisioning services
Develop and maintain IAM policies, procedures, and standards
Partner with IT and product teams for SSO and user registration integration
Maintain and support API based micro services for customizing customer and partner registration
Manage scalability, capacity planning, redundancy, and resiliency
Maintain service availability and performance SLAs based on business and product requirements
Work with other Identity Platform engineers to deploy and maintain services, capacity planning, create and review operational runbooks
Contribute to future roadmap, design, deployment, validation, operations and DR/BCP
Design proactive service monitoring, alerting and trend analysis of the services, and implement self healing
Participate in on-call support rotation and handle IAM-related incidents as needed