Enterprise Cybersecurity Engineer

NASA Jet Propulsion Laboratory (JPL); United States; On-site; USD 123,000 - 127,000; Full time

Benefits offered by this job

Health insurance

Dental plan

Retirement plans

Job summary

The Jet Propulsion Laboratory in Pasadena, CA seeks an Identity Management professional to lead enterprise AD/SSO solutions. You will design, deploy, and maintain Active Directory infrastructure, implement PKI, ADFS, and SSO integration, and develop scripts (VB/PowerShell) to automate directory tasks.

Strong collaboration with customers and cybersecurity compliance is required. Required background includes a CS degree with relevant IT experience, UNIX/Windows admin, and experience with log

Qualifications

• Bachelor's degree with 3+ years in CS/IT
• Experience in Cybersecurity/Identity Management or UNIX/Windows admin
• Knowledge of securing networked systems
• Experience with log analytics tools (Splunk, Syslog, Windows Event Manager)
• Experience architecting scalable systems and applications

Responsibilities

• Gathers, analyzes, designs, deploys and maintains major identity management solutions
• Interfaces with customers to capture requirements for highly complex enterprise directory services and SSO
• Configures software that integrates with enterprise apps for directory authentication
• Assists in managing JPL’s Active Directory infrastructure and security
• Develops Visual Basic and PowerShell scripts for AD management
• Document implementation processes and procedures

Skills

Active Directory

PowerShell

Visual Basic

ADFS

PKI

SAML SSO

Education

Bachelor’s degree in CS/IT

Master’s degree in CS/IT

Tools

Windows DNS

Splunk

Windows Event Manager

Oracle

Job description

Job Details

New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.

Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence.

Will Statement

• Gathers complex and critical requirements; analyzes, plans, designs, configures, tests, deploys, rolls out and maintains major enterprise identity management solutions.
• Serves as key interface with customers to facilitate, negotiate and capture requirements for highly critical and complex enterprise directory services for integration of single or reduced sign-on capabilities; advises customer and management
• Modifies sets up, and/or configures complex software that integrates with the enterprise suite of applications and/or standalone applications, leveraging identity management for single sign-of custom applications and enterprise network users.
• Assist in managing JPL’s Active Directory infrastructure. Support design, upgrade and maintenance of the Active Directory environment to ensure the security, integrity, and availability of directory authentication.
• Design and implement Active Directory Group Policies in compliance with JPL Cybersecurity policies.
• Integrate NASA’s PIV smart card authentication with JPL’s Active Directory to comply with Homeland Security Presidential Directive 12 (HSPD-12).
• Develop and implement Visual Basic and PowerShell scripts for managing Active Directory data.
• Perform domain rename and migration of Active Directory for reconstruction of the directory infrastructure.
• Manage Windows DNS servers for Active Directory zones and Windows Internet Name Service servers for NetBIOS records in support of NTLM, Kerberos and LDAP authentication to Active Directory.
• Design and implement Windows Certificate Service for integration of PKI to Active Directory.
• Implement Active Directory Federation Services (ADFS) and IIS servers in support of enabling Web Single Sign On (SSO) to SAML compliant applications.
• Provide technical support for Samba servers integration with Active Directory.
• Provide support for configuration of Oracle Access Manager (OAM) WebGate for integration of Web Single Sign On (SSO) to the JPLIT directory service.
• Provide level 3 support to developers and customers for Windows directory related issues.
• Document implementation processes and procedures.

Required Skills

• Typically requires a bachelor’s degree with a minimum of 3 years of experience in a Computer Science or related technical Information Technology career field; master’s degree with a minimum of 1 year in computer science or related technical Information Technology career field with a minimum of 0 years of related experience
• Experience and knowledge in one or more of the following areas: Cybersecurity Operations, Identity Management Systems, Network and Systems Architecture, UNIX and Windows systems administration.
• Understanding and knowledge of the application of advanced principles, theories, concepts and techniques in securing networked computer systems.
• Knowledge and direct working experience with the following log aggregation technologies which may include Splunk, Syslog and Windows Event Manager,
• Experience architecting scalable systems and applications.
• Excellent teaming skills, capable of following team leadership guidance while leading aspects of highly technical project developments.
• Excellent written and verbal communication skills, capable of effectively capturing and communicating technical information at all levels.
• Experience and advanced knowledge in one or more of the following areas: Active Direction design, functional requirements, and implementation of Identity Management system/process improvements. Knowledge of capturing business process requirements leading to integrated system architecture and design. Working knowledge of system development lifecycle methods, authentication for relational database concepts (Oracle), data flow diagrams, data dictionaries, requirements documentation. Excellent system analysis, design, analytical, problem solving and communication skills ranging from concepts to detail requirements to user guides and tutorials. Significant understanding of HR reporting and analytics design and implementation.

Desired Skills

• Knowledge of Laboratory policies and procedures, NASA policies and procedures, and government regulations across a range of applications.
• Experience working with Oracle programmers to communicate requirements, in support of Oracle authentication management, Oracle Interface functionality, documenting/testing bug fixes, and partnering on implementing security related enhancements.
• Understanding of internal business processes in a high-tech environment such as project management and designing system enhancements with positive productivity improvements by enhancing functionality of user requirements.Please see the Discipline Matrix on the HR Knowledge Base Website under Job Classifications.

JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more. Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together. For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date.

For further benefits information click Benefits and Perks

The hiring range displayed below is specifically for those who will work in or reside in the location listed. In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate’s job related skills, experience, knowledge, and relevant education/training.

The typical full time equivalent annual hiring range for this job in Pasadena, California.

$122,720 - $126,672

JPL is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, citizenship, ancestry, age, marital status, physical or mental disability, medical condition, genetic information, pregnancy or perceived pregnancy, gender, gender identity, gender expression, sexual orientation, protected military or veteran status or any other characteristic or condition protected by Federal, state or local law.

In addition, JPL is a VEVRAA Federal Contractor.

EEO is the Law.

EEO is the Law Supplement

Pay Transparency Nondiscrimination Provision

The Jet Propulsion Laboratory is a federal facility. Due to rules imposed by NASA, JPL will not accept applications from citizens of designated countries or those born in a designated country unless they are U.S. Citizens, Legal Permanent Residents of the U.S or have other protected status under 8 U.S.C. 1324b(a)(3). The Designated Countries List is available here .