Senior​/Principal Solutions Architect - Enterprise Management Services, Hybrid

About Sandia:

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting‑edge work in a broad array of areas.

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co‑workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten‑hour days each week) compressed workweeks, part‑time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://(Use the "Apply for this Job" box below)..gov

* These benefits vary by job classification.

We are seeking an experienced Solutions Architect to join our dynamic team responsible for managing a large-scale enterprise Product Data Management (PDM) system. This system delivers best-in-class engineering solutions that support our Nuclear Deterrence (ND) and Nuclear Security Enterprise (NSE) customers.

• Lead architecture and implementation of Identity Management solutions using SailPoint Identity IQ, Forge Rock IDM, Ping Federate, and related technologies.
• Manage identity provisioning, lifecycle, and account/group management applications.
• Develop automation scripts (Power Shell, Java, Python, C++) to optimize processes and ensure data integrity.
• Oversee vulnerability patch management and SSL/SSO certificate lifecycle for IAM environments.
• Collaborate with cross-functional teams to design and improve IAM workflows and automation.
• Maintain documentation related to IAM processes, policies, and system configurations.
• Monitor production services and respond to system issues promptly.
• Ensure compliance with NIST protocols and DOE security standards.
• Collaborate with infrastructure, application, and governance teams to support enterprise identity services.

* The selected applicant will work a hybrid schedule, combining onsite and remote work. They must reside within a reasonable commute distance to the assigned work location and be available to work onsite at least three days per week.

$117,500 - $235,700

* Salary range is estimated, and actual salary will be determined after consideration of the selected candidate’s experience and qualifications, and application of any approved geographic salary differential.

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience);
  Plus a minimum 5 years of experience in Identity Access Management.
• Advanced knowledge in at least one of the following solutions:
  SailPoint Identity IQ, Forge Rock IDM, Ping Federate or EntraID.
• Strong scripting/programming skills in Power Shell, Java, Python, or C++.
• Red Hat Enterprise Linux experience.

• Understanding of identity federation methodologies and configurations.
• Excellent communication and collaboration skills.
• Experience with secure EntraID identity solutions with Conditional Access policies.
• Advanced knowledge of identity federation, HTTP, XML, REST, SCIM protocols.
• Experience with web application development frameworks (Angular, React).
• Strong understanding of encryption algorithms and security best practices.
• Understanding of authentication protocols (SAML, OAuth, OpenID Connect) and directory services (LDAP).
• Experience managing identities in cloud platforms (AWS IAM, Azure AD, Google Cloud IAM).

Department 9784 Enterprise Management Services is a trusted efficient IT services provider and technology partner. Our standard is to deliver critical reliable services to our customers in Mobile Classified Computing, Corporate Enterprise Backups, ESN Operations, ESN Supply Chain & Software Assurance, and Control M Batch Schedule Application.

EEO:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.