IAM Access Gateway Engineer

Apex Systems; Richmond (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

401K with company match

HSA (Health Savings Account)

EAP

Job summary

Everforth Apex Systems in Glen Allen, Virginia is seeking a Security Automation Engineer to design and implement IaC/CaC, focusing on secure authentication, authorization, web gateway, and API services. Join a team of security engineers to reduce manual processes, build CI/CD pipelines, automate health checks, and integrate with ServiceNow, CM, and incident response.

This role emphasizes automation across IAM and security tooling, with opportunities to advance Infrastructure as code and rapid

Qualifications

• Ansible Tower
• GitLab
• Python
• OpenShift and/or Kubernetes
• Unix/Linux
• Shell scripting
• Identity and Access Management Systems (IAM)
• Experience with RESTful API’s
• Argo CD
• Agile
• Knowledge of modern authentication and authorization protocols including:
• OAuth 2.0
• Open ID Connect (OIDC)
• Federation (SAML 2.0)
• System for Cross-domain Identity Management (SCIM)
• Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• JavaScript
• ServiceNow
• PKI Experience
• RedHat Enterprise Linux (RHEL)
• Ansible Automation Hub and Ansible Galaxy
• Nexus*

Responsibilities

• Automate deployments including IBM Security Products to support IAM and security tooling.
• Design and develop code required to build and maintain Access Management Services.
• Improve automated health checks and monitoring to catch issues early.
• Reduce time spent on manual tasks by automating workflows and CI/CD pipelines.
• Integrate with CM and ServiceNow for change management and incident response.
• Enable no-touch deployment to shorten time to market and simplify operations.
• Share knowledge and seek continuous improvement opportunities.

Skills

Ansible Tower

GitLab

Python

OpenShift and/or Kubernetes

Unix/Linux

Shell scripting

IAM

RESTful APIs

Argo CD

Agile

OAuth 2.0

OIDC

SAML 2.0

SCIM

LDAP

IBM Security products

SQL

JavaScript

ServiceNow

PKI

RHEL

Ansible Automation Hub

Nexus

Education

Bachelor's Degree or equivalent experience

Master's Degree may be preferred

5+ years of relevant work experience

Tools

GitLab

Ansible Tower

OpenShift

Kubernetes

Argo CD

Job description

• Identity and Access Management Systems (IAM)
• Experience with RESTful API’s
• AgilePreferred Qualifications:
• Knowledge of modern authentication and authorization protocols including:
• OAuth 2.0
• Open ID Connect (OIDC)
• System for Cross-domain Identity Management (SCIM)
• Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• ServicceNow
• PKI Experience
• Ansible Automation Hub and Ansible Galaxy
• Nexus*Other/Additional Requirements:Working Conditions: Will require the use of standard office equipment such as computers, phones, photocopiers, etc.Physical Demands: Requires some degree of sitting (for prolonged periods of time), standing, lifting carrying, pushing, pulling less than 20 lbs.Hours of Work: May require extended work hours. Occasional travel including overnight stays may be necessary.US Citizenship or US Permanent Resident status is required.Education/Experience:Bachelor's Degree or equivalent experience/Master's Degree may be preferred or with 5+ years of relevant work experience.*Denotes essential duties and/or any physical requirements required to perform essential duties for the role. Responsibilities: Job postingSecurity Automation EngineerThe mission of the Federal Reserve System is to foster the stability, integrity, and efficiency of the nation’s monetary, financial, and payments systems to promote optimal economic performance. Within this broad context the vital mission of the National IT Services is to deliver superior value to our customers through world-class IT services and solutions that are responsive to business needs, adaptive to change, and essential to the mission of the Federal Reserve System.Job Summary:Access gateway Engineer uses technology to improve, streamline and automate information technology systems and services. The eBusiness Security Access Gateway team is seeking an automation engineer to join a team of security engineers to create and improve Infrastructure and Configuration as Code (IaC and CaC). The Access gateway Engineer will collaborate with the eBusiness engineering team to understand secure Authentication, Authorization, Web Gateway, and API services to reduce manual processes, build CI/CD pipelines, and reduce overall time to market.Position Requirements:An automation engineer is needed to assist with further development of automated deployments inclusive of IBM Security Products. This position would assist in design and developing the code required to build and maintain Access Management Services. This will allow the enhancement of and development of stronger automation processes, including full CI/CD pipelines, around the various Access Gateway environments, leading to less manual execution of scripts. Further automation will allow administrators to focus on code rather than procedures. Long term this will improve Change Management (CM) practices by ensuring all changes are captured in source control. This will enable automated rebuilds rehydrating environments and rapid recovery from ransomware or other critical incidents. The position will be responsible for improving existing processes and creating new automated health checks. Further efforts will reduce time spent by administrators doing manual tasks, reducing errors, integration with CM, integrate system monitoring for auto incident creation, self-healing based on environmental health, and streamlining work intake requests by integrating with Service Now. Future development efforts will enable no touch deployment to further reduce time to market. Other duties will include knowledge sharing and continuously seeking improvement opportunities.

Job #: 3026357

Qualifications

• Ansible Tower
• GitLab
• Python
• OpenShift and/or Kubernetes
• Unix/Linux
• Shell scripting
• Identity and Access Management Systems (IAM)
• Experience with RESTful API’s
• Argo CD
• AgilePreferred Qualifications:
• Knowledge of modern authentication and authorization protocols including:
• OAuth 2.0
• Open ID Connect (OIDC)
• Federation (SAML 2.0)
• System for Cross-domain Identity Management (SCIM)
• Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• JavaScript
• ServicceNow
• PKI Experience
• RedHat Enterprise Linux (RHEL)
• Ansible Automation Hub and Ansible Galaxy
• Nexus*

Benefits Overview

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our Welcome Packet as well, which an Everforth Apex team member can provide.

Equal Opportunity Statement

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

ADA Accommodation

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

4400 Cox Road

Suite 200

Glen Allen, Virginia 23060