SSO Admin

Enterprise Security Administrator

SEI’s Enterprise Security Administrators are charged with the operational maintenance and support of SEI’s enterprise Single-Sign on Ecosystem. As such, their role can have an impact on the entire organization. The Enterprise Security Administrator delivers and enforces technical directives as led by the Manager of Linux Applications Operations. Their areas of focus are maintaining production support service level agreements, customer service, issue escalation and documentation.

It is expected that an Enterprise Security Administrator will continue the pursuit of technical expertise in the areas pertinent to enterprise single-sign on Administration while remaining cognizant of vendor best practices and future product development within the industry. SEI’s current vendors for Enterprise SSO and IDM is Ping.

% Time
- Job Functions & Standard Expectations
- Essential or Non-essential responsibilities (E or Non-E)

• Assist in the implementation/maintenance of SEI best practices for Ping Access/Federate and Forgerock IDM as directed by Manager of Linux Applications Administration.
  
  - E
• Act as technical resource on medium to large Ping integration efforts with oversight from Senior Level+ Ping Administrators and/or Manager of Linux Administration.
  
  - E
• Participate in implementing vendor-delivered updates/upgrades by employing vendor best practices and architecture.
  
  - E
• Perform root cause analysis on system issues/outages.
  
  - E
• Maintain configuration and automation required for building production, QA and development environments. Ensure and maintain quality of non-production environments.
  
  - E
• Participate in regularly scheduled on-call and migration rotations.
  
  - E
• Actively create/update documentation pertaining to Ping/Forgerock Administration duties and ongoing issues.
  
  - E
• Act as a resource for internal/external audit discovery/remediation.
  
  - Non-E
• Engage in ongoing learning in the realm of Enterprise Single-Signon
  - Non-E

Experience: 3-5 years Systems Administration and/or Experience with enterprise Single Sign-on Applications

Education: Pursuing Certified Oracle Training within the Peoplesoft Administrator/DBA Track.

Additional required competencies/skills:

• Experience in working with single sign-on and federation protocols like SAML.
• A willingness to learn and grow within the Access Management space.
• Good understanding of access management, federated identity, 2-factor solutions, and LDAP directories.
• Good hands-on experience in Ping Federate, Ping Access and/or similar SSO solution a plus.
• Experience in installing and maintaining the Ping Federate/Ping Access across different environments.
• Strong working knowledge of Ping Federate Policy server, policy enforcement products/concepts.
• Excellent troubleshooting skills with Ping Federate and/or Ping Access
• Experience with operating systems (Windows Server, Linux/Unix) and application servers.
• Experience in working with Active directory.
• Experience with HTTP Servers web/proxy rules configuration.
• Excellent written and verbal communication skills and a demonstrated ability to interact cross-functionally with other IT groups.
• A developing maturity and prudence interfacing with production systems.
• Developing proficiency in system automation (shell scripting, programming, etc).
• Basic understanding of software architecture.
• Basic knowledge of project management methodology and terminology.

Required Skills :
Ping Federate Basic Qualification :
Ping, Okta, etc. Scripting: shell, Powershell, API Additional Skills :
Ping, Okta, etc.