IAM Linux Engineer

Overview

Select how often (in days) to receive an alert:

The High-Performance Computing Systems Section within the National Center for Computational Sciences (NCCS) is seeking an IAM Linux Engineer to join the HPC Infrastructure team. The preferred candidate will possess commensurate knowledge, skills and abilities in addition to relevant education, certifications, experience and demonstrated ability to work as a member of a team.

NCCS Provides state-of-the-art computational and data science infrastructure coupled with dedicated technical and scientific professionals tackling large-scale problems across a broad range of scientific domains for accelerating scientific discovery and engineering advances. NCCS hosts the Oak Ridge Leadership Computing Facility (OLCF), one of the Department of Energy’s (DOE) National User Facilities which operates Frontier, the nation’s first exascale supercomputer.

Systems Administration:

• Deploy, configure and manage HPC-scale services in a Linux environment, primarily Red Hat and Rocky
• Coordinate and perform regular patches, updates and backups
• Monitor systems using tools like Nagios and Grafana
• Deploy and administer NFS storage using Net App
• Respond to and troubleshoot complex issues

Identity Management and Security:

• Administration of RSA Secure
  
  ID and Ping Federate servers
• Deploy, configure and support identity and access management services such as single-sign on (SSO), OAuth, two-factor auth, zero trust, etc…
• IdM integration with user applications and Entra

Virtualization and Automation:

• Deploy and manage resources in the NCCS VMware environment
• Automate systems administration tasks using tools like Puppet, Terraform and Ansible

Basic Qualifications:

• Bachelor’s degree in computer science or closely related field and a minimum of 2 years of experience in Linux systems administration and/or Identity Management, or a Master’s Degree and a minimum of 1 year of experience in Linux systems administration and/or Identity Management.
• An equivalent combination of education and experience will be considered.

Preferred Qualifications:

• Excellent interpersonal/communication skills and the ability to work within a team
• Foundational knowledge of modern authentication and authorization standards, including SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP
• Familiarity with managing user identities and group memberships in LDAP and Active Directory
• Understanding of cloud-native IAM concepts (roles, policies, and service accounts) in platforms like AWS, Azure, or GCP
• Strong working knowledge of Linux system fundamentals and common network protocols
• Programming and scripting skills in common languages such as Python and bash
• Understanding of versioning and code review tools like Git Hub and Git Lab
• Experience with configuration management tools such as Puppet or Ansible
• Experience deploying and maintaining virtual environments using VMware
• Working knowledge of common infrastructure services such as OpenLDAP, DNS, DHCP, etc…
• Ability to plan, prioritize and complete assigned projects with minimal supervision

• This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.

For employment at Oak Ridge National Laboratory (ORNL), a Real  form of identification will be required. Additionally, ORNL is subject to Department of Energy (DOE) access restrictions. All employees must also be able to obtain and maintain a federal Personal Identity Verification (PIV) card as mandated by Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which requires a favorable post-employment background investigation.

To obtain this credential, new employees must successfully complete and pass a Federal Tier 1 background check investigation. This investigation includes a declaration of illegal drug activities, including use, supply,…