IAM Access Gateway Engineer

• Identity and Access Management Systems (IAM)
• Experience with RESTful API’s
• Agile
  
  Preferred Qualifications:
• Knowledge of modern authentication and authorization protocols including:
• OAuth 2.0
• Open  (OIDC)
• System for Cross-domain Identity Management (SCIM)
• Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• Servicce Now
• PKI Experience
• Ansible Automation Hub and Ansible Galaxy
• Nexus
  * Other/
  
  Additional Requirements:
  
  Working Conditions:
  
  Will require the use of standard office equipment such as computers, phones, photocopiers, etc.
  
  Physical Demands:
  Requires some degree of sitting (for prolonged periods of time), standing, lifting carrying, pushing, pulling less than 20 lbs.
  
  Hours of Work:
  May require extended work hours. Occasional travel including overnight stays may be necessary.
  
  US Citizenship or US Permanent Resident status is required.
  
  Education/
  
  Experience:
  
  Bachelor's Degree or equivalent experience/Master's Degree may be preferred or with 5+ years of relevant work experience.
  * Denotes essential duties and/or any physical requirements required to perform essential duties for the role. Responsibilities:
  Job posting
  
  Security Automation Engineer The mission of the Federal Reserve System is to foster the stability, integrity, and efficiency of the nation’s monetary, financial, and payments systems to promote optimal economic performance. Within this broad context the vital mission of the National IT Services is to deliver superior value to our customers through world-class IT services and solutions that are responsive to business needs, adaptive to change, and essential to the mission of the Federal Reserve System.
  
  Job Summary:
  
  Access gateway Engineer uses technology to improve, streamline and automate information technology systems and services. The eBusiness Security Access Gateway team is seeking an automation engineer to join a team of security engineers to create and improve Infrastructure and Configuration as Code (IaC and CaC). The Access gateway Engineer will collaborate with the eBusiness engineering team to understand secure Authentication, Authorization, Web Gateway, and API services to reduce manual processes, build CI/CD pipelines, and reduce overall time to market.
  
  Position Requirements :
  
  An automation engineer is needed to assist with further development of automated deployments inclusive of IBM Security Products. This position would assist in design and developing the code required to build and maintain Access Management Services. This will allow the enhancement of and development of stronger automation processes, including full CI/CD pipelines, around the various Access Gateway environments, leading to less manual execution of scripts.
  
  Further automation will allow administrators to focus on code rather than procedures. Long term this will improve Change Management (CM) practices by ensuring all changes are captured in source control. This will enable automated rebuilds rehydrating environments and rapid recovery from ransomware or other critical incidents. The position will be responsible for improving existing processes and creating new automated health checks.
  
  Further efforts will reduce time spent by administrators doing manual tasks, reducing errors, integration with CM, integrate system monitoring for auto incident creation, self-healing based on environmental health, and streamlining work intake requests by integrating with Service Now. Future development efforts will enable no touch deployment to further reduce time to market. Other duties will include knowledge sharing and continuously seeking improvement opportunities.

• Ansible Tower
• Git Lab
• Python
• Open Shift and/or Kubernetes
• Unix/Linux
• Shell scripting
• Identity and Access Management Systems (IAM)
• Experience with RESTful API’s
• Argo CD
• Agile
  
  Preferred Qualifications:
• Knowledge of modern authentication and authorization protocols including:
• OAuth 2.0
• Open  (OIDC)
• Federation (SAML 2.0)
• System for Cross-domain Identity Management (SCIM)
• Lightweight Directory Access Protocol (LDAP)
• Experience with IBM Security products
• SQL
• Java Script
• Servicce Now
• PKI Experience
• Red Hat Enterprise Linux (RHEL)
• Ansible Automation Hub and Ansible Galaxy
• Nexus*

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a Support Linc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts.

In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership…