TOP THINGS:
– experience with SSO (preferably PING) and IGA (preferably SailPoint).

This resource need is a combination of profile like JP 1001 (i.e. SSO- preferably PING) and experience with identity governance systems such as Oracle Identity Manager (OIM) and SailPoint Identity IQ (IIQ).

Position Summary
The Identity Access Management (IAM) Engineer, Expert is responsible for installation, integration and deployment of IAM solutions within the Cybersecurity IAM team. The IAM Principal Engineer requires a strong understanding of Identity Access Management (IAM), and Identity Access Governance (IAG) products and implementation methodologies. The IAM Principal Engineer is expected to have strong technical and soft skills, must be a proven self-starter with the ability to problem-solve, communicate, participate in diverse project teams from a technical perspective, interface effectively with our internal Cybersecurity teams and LOB customers, vendor partners, and colleagues.

This work location is Sacramento, CA.

Qualifications
Minimum:
• BA/BS degree in Computer Science, Engineering, Business or related degree or equivalent experience
• 5 years of IT engineering design and/or technical project implementation
• Experience with multi-tier enterprise technology environments
• Experience with Web Access Management platforms and Single-Sign-On tools such as SecureAuth, Siiteminder, PingAccess, PingFederate, ForgeRock
• Experience with identity governance platforms such as SailPoint IdentityIQ, OIM, Saviynt or similar tools
• Experience with Java development
• Extensive experience in implementing access management controls and systems

Desired:
• Directory management experience such as ODSEE, OUD, or others
• Expert level understanding and implementation experience, in multiple core business areas of a utility, within process design, information modeling or system architecture
• Expert understanding of the operations engineering discipline, processes, concepts and best
Practices

Technical Qualifications
• Experience with identity governance platforms such as SailPoint IdentityIQ, OIM, Saviynt or similar tools
• Expertise in developing integration APIs and web services (RESTful/SOAP)
• Experience with Java development
• Web Access Management: Experience with Single-Sign-On tools similar to SecureAuth, Siiteminder, PingAccess, PingFederate, ForgeRock
• Integration experience with SAML, OpenID Connect, Oauth
• Expertise in developing integration APIs and web services (RESTful/SOAP)
• Integration experience with Multi Factor Authentication
• User directories: Understanding of LDAP, Virtual Directory Services, and Active Directory
• Privileged Access Management: Understanding of privileged access password management (PAPM) tools
• Monitoring: Tools such as Splunk, and SEIM platforms like QRadar
• Scripting/automation experience using PowerShell, VBScript, python, or bash
• Web application server knowledge (e.g. IIS, WebLogic, or Tomcat)
• Understanding of secure software development practices (AppSec)
• Agile development experience
• Understanding of authentication and authorization tools and technologies

Job Responsibilities
• Design SSO and IGA integration patterns then work with our customers to implement them.
• Design, integrate, develop, configure, and release enterprise Identity & Access Management (IAM) solutions & capabilities.
• Provide software development & database skills in the delivery of sophisticated identity management solutions (both COTS and custom-built) that enable both employees and external clients to access systems and data while maintaining the principle of least privilege, using a combination of coding, scripting, integration, and platform customization – including system upgrades, installation, and performance tuning.
• Demonstrate exceptional analytical problem-solving skills including the ability to perform root cause analysis, troubleshooting, and system support.
• Provide timely, concise, and situationally appropriate status on deployment and app integration work.
• Work on automation and scripting to enable self-service environments and processes where practical.
• Author technical documentation, including: infrastructure topology, system design, workflows, data flows/mapping, implementation steps, and user/system support.