Enterprise Cybersecurity Engineer

Job Details

New ideas are all around us, but only a few will change the world. That’s our focus  ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations and share our discoveries to inspire future generations. Your mission—your opportunity— is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.

Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence.

Will:
Be a member of the Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office and will report to 6250 Office Manager. Will assist in the development and design of conceptual and detailed system and process solutions to meet Identify Management and Directory access requirements for business systems, flight/mission systems and institutional network needs and user requirements. Assist in analyzing and creating design concepts and architecture diagrams, plus functional/technical requirements as needed for single sign-on solutions, light directory access protocol, Kerberos authentication and other authentication methods as required.

Work with internal organizations to understand internal technical and business processes, participate in focus groups to document requirements, present system concepts, demos, and provide implementation support. Support analysis of system enhancements, maintenance, and upgrades for Identify Management of functional applications including interfaces to business systems, human resources, institutional and flight/mission systems. Document and track development changes and fixes using configuration management systems.

Support system problem identification and resolution, including requirements for and functional testing authentication solutions prior to roll-out to production systems. Perform functional validation testing for identity management and directory access solutions.

• Gathers complex and critical requirements; analyzes, plans, designs, configures, tests, deploys, rolls out and maintains major enterprise identity management solutions.
• Serves as key interface with customers to facilitate, negotiate and capture requirements for highly critical and complex enterprise directory services for integration of single or reduced sign-on capabilities; advises customer and management.
• Modifies, sets up, and/or configures complex software that integrates with the enterprise suite of applications and/or standalone applications, leveraging identity management for single sign-off custom applications and enterprise network users.
• Assists in managing JPL’s Active Directory infrastructure. Supports design, upgrade and maintenance of the Active Directory environment to ensure the security, integrity, and availability of directory authentication.
• Designs and implements Active Directory Group Policies in compliance with JPL Cybersecurity policies.
• Integrates NASA’s PIV smart card authentication with JPL’s Active Directory to comply with Homeland Security Presidential Directive 12 (HSPD-12).
• Develops and implements Visual Basic and Power Shell scripts for managing Active Directory data.
• Performs domain rename and migration of Active Directory for reconstruction of the directory infrastructure.
• Manages Windows DNS servers for Active Directory zones and Windows Internet Name Service servers for NetBIOS records in support of NTLM, Kerberos and LDAP authentication to Active Directory.
• Designs and implements Windows Certificate Service for integration of PKI to Active Directory.
• Implements Active Directory Federation Services (ADFS) and IIS servers in support of enabling Web Single Sign On (SSO) to SAML compliant applications.
• Provides technical support for Samba servers integration with Active Directory.
• Provides support for configuration of Oracle Access Manager (OAM) Web Gate for integration of…