Engineer IV- SailPoint

Verisign Inc.; Virginia, Great Falls Crossing (MN, VA); On-site; USD 135,000 - 184,000; Full time

Job summary

Join a forward-thinking company dedicated to enhancing internet security as an Identity and Access Management (IAM) Engineer. In this pivotal role, you will manage IAM systems, focusing on operational excellence and security. Collaborate with cross-functional teams to design and implement robust solutions like Single Sign-On (SSO) and Multi-Factor Authentication (MFA). With a strong emphasis on continuous improvement, your expertise will shape the IAM architecture, ensuring alignment with security frameworks. This position offers a dynamic work environment, competitive benefits, and opportunities for professional growth in a mission-driven organization committed to a secure internet.

Qualifications

• 8+ years of experience in IAM security architecture and platform administration.
• Proficiency in programming languages like Java, Python, and Ansible.

Responsibilities

• Manage and optimize IAM systems, ensuring security and reliability.
• Design and implement SSO solutions and MFA strategies.

Skills

IAM security architecture

Java

Python

Ansible

SSO solutions

MFA strategy

Privileged Access Management (PAM)

REST APIs

SailPoint IdentityIQ

Cloud IAM solutions

Education

Bachelor's degree in computer science or related discipline

Relevant certifications (CIAM, CISSP)

Tools

Ping Identity

SailPoint

AWS

Azure

Confluence Wiki

Job description

Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services.

We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.

The Identity and Access Management (IAM) Engineer is essential in managing and optimizing Verisign's identity and access management systems. This role is centered on the operational aspects of IAM, focusing on maintaining comprehensive and resilient security, reliability, and efficiency of these systems. The Senior Engineer will collaborate with various teams, providing strategic and operational expertise, and support the continuous improvement of IAM practices.

Responsibilities:

• Provide hands-on technical administration of critical IAM systems and applications, ensuring optimal performance, integration, security, and delivering senior operational support


• Design, implement, and manage Single Sign-On (SSO) solutions using Ping Identity


• Develop and execute the MFA strategy, integrating MFA solutions into the existing IAM framework


• Implement IGA projects using SailPoint, including Application Onboarding, Access Certification, Identity and Account lifecycle events (Joiner/Mover/Leaver), as well as role and entitlement analysis


• Oversee the deployment and ongoing management of Privileged Access Management (PAM) solutions to secure critical systems and monitor privileged access, ensuring alignment with security policies and adapting to evolving security needs


• Participate in strategic planning for IAM, aligning the IAM architecture with Verisign's security objective and compliance with security frameworks like NIST and CIS


• Work collaboratively with cross-functional teams to enhance IAM solutions. Manage relationships with vendors, assessing new technologies and contributing to procurement decisions


• Mentor junior engineers and lead technical teams. Communicate IAM strategies and security principles effectively across the organization


• Create and maintain operational documentation with collaboration tools like Confluence Wiki for systems configurations, operational procedures, and best practices

Qualifications and Preferred Expertise:

• Bachelor's degree in computer science, technology, or a related discipline


• Relevant certifications such as CIAM, CISSP, or equivalent IAM vendor-specific certifications


• 8+ years of related experience in an IT role, with specific focus on IAM security architecture and platform administration


• Strong problem-solving communication skills


• Proficiency in programming and scripting languages including Java, Python, and Ansible


• In-depth knowledge of authentication and authorization mechanisms, including SSO, MFA, and PAM, across on-premises, distributed, and SaaS environments


• Must have application onboarding experience along with SailPoint IdentityIQ connector development


• Must have experience implementing webservices connectors utilizing REST APIs


• Expertise in designing and implementing IAM solutions: SSO, MFA, IGA, PAM, integrations with various Identity Providers (IdPs), and IAM security protocols like SAML, OAuth, and OIDC


• Direct experience with IAM vendor solutions like Ping Identity and SailPoint, and other IAM technologies


• Experience with cloud based IAM solutions including AWS, Azure, or equivalent platforms, with a solid understanding of cloud environment IAM roles, policies, and best practices


• Skilled in designing and configuring IAM across complex global infrastructures for high availability, with an understanding of cyberattacks and proactive IAM defenses


• SailPoint Certified IdentityIQ Engineer


• IMI certifications or training preferred

This position is based in our Reston, VA office

The pay range is $135,800- $183,800.

The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.

Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.

Additional Information:
Our Careers Page
Our Benefits Summary
Verisign in the Community
Our EEO Statement
Our Privacy Notice for Job Applicants/Candidates
Reasonable Accommodations

Staffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties.