Senior HPC IAM Engineer (TS/SCI) – On-Site

Ctrl +; Corridor North (MD); On-site; USD 170,000 - 188,000; Full time

Benefits offered by this job

10% employer 401(k) non-elective

Life insurance

Disability insurance

Medical, dental and vision coverage

Employee Assistance Program

Certification reimbursement

Ergonomic equipment reimbursement

Referral bonuses

Team events

Job summary

Ctrl+ is seeking a skilled engineer to secure access to high-performance computing resources. This on-site role in Annapolis Junction, MD requires active TS/SCI with polygraph and in-person work with DoD-focused duties and strict security standards.

You will implement RBAC/ABAC, build IAM and SSO solutions, integrate HashiCorp Vault, harden Linux with PAM/SELinux/ACLs, and automate provisioning using Ansible playbooks. Excellent compensation model options exist.

Qualifications

• 7 years of relevant experience with a Bachelor’s degree in Computer Science or a related discipline (5 years with a Master’s, or 9 years without a degree).
• Linux command-line tools are required.
• Bash scripting.
• Python development.
• RBAC/ABAC implementation.
• Linux security: PAM, SELinux, ACLs and audit logging.
• Keycloak
• SAML, OIDC and OAuth2.
• HashiCorp Vault
• Ansible
• Docker, Podman or containerd
• GitLab CI and Git

Responsibilities

• Implement RBAC and ABAC controls for HPC systems.
• Build IAM, SSO and identity federation solutions.
• Integrate secrets management with HashiCorp Vault.
• Harden Linux with PAM, SELinux, ACLs and audit logging.
• Automate provisioning with Ansible playbooks.

Skills

RBAC implementation

ABAC implementation

Linux command-line tools

Bash scripting

Python development

Keycloak

SAML

OIDC

OAuth2

HashiCorp Vault

Ansible

Docker

Podman

containerd

GitLab CI

Git

Education

Bachelor’s degree in Computer Science or related

Tools

HashiCorp Vault

Ansible

Docker

Podman

containerd

GitLab CI

Git

Job description

Ctrl+ is seeking a skilled engineer to secure access to high-performance computing resources. This on-site role in Annapolis Junction, MD requires active TS/SCI with polygraph and in-person work with DoD-focused duties and strict security standards.

You will implement RBAC/ABAC, build IAM and SSO solutions, integrate HashiCorp Vault, harden Linux with PAM/SELinux/ACLs, and automate provisioning using Ansible playbooks. Excellent compensation model options exist.