Identity and Access Management Security Consultant

Security and Compliance Consultant (CG38708)

12+ Month Contract

Locations: Greenwood Village, CO or Portland, OR (remote work possible)

Contract Terms: W2

Position Overview 
Information Security, Access Management Engineering is seeking an experienced engineering consultant of identity and access management (IAM) technologies to lead technical delivery of mission-critical authentication and access product/service integrations. Must have excellent verbal and written communication skills and the ability to perform self-directed work within a team environment. 

Job Role: 
The central authentication engineering consultant position includes the installation, configuration, testing, deployment and coordination delivering access management system integrations. You will work directly with analysts, developers, testers, project managers and business partners. This position will be the primary technical engineer rapidly integrating applications with client's web single sign-on (WSSO) platform, and client's Federated Access Management (FAM) - federated single sign-on (FSSO) - platform and services. 

Essential Functions: 
Stellar knowledge of access management technologies, processes, support and integration within a large IT ecosystem 
Analyze, configure, test and integrate high-quality access management application integrations 
Coordinate with key stakeholders to maintain overall quality and availability of access management integrations 
Provide guidance and consultations in areas of WSSO integration, issue resolution and engineering support 
Provide guidance and consultations in areas of FAM/FSSO integration, issue resolution and engineering support 
Perform detailed system analysis and develop integration technical plans 

Basic Qualifications: 
5 or more years of experience in identity and access management and IT security 
3-5 years of hands-on experience implementing, configuring and supporting Oracle Access Manager (OAM) 10g 
3-5 years of hands-on experience implementing outbound service provider integration with PingFederate for federated single sign-on (FAM/FSSO), leveraging OAM 10g for authentication 
Experience with WebGate installation and configuration on Unix, AIX, Windows and Linux-based operating systems - and integrating with IBM HTTP Server (IHS), Apache and IIS web Servers 
Experience with certificate management and key-management platforms including Venify 
Proficient with LDAP and LDAP-based technologies (Tivoli Directory Server, Active Directory) 
Ability to coordinate and interface with IT and business partners 
Identify system and integration requirements and analyze fitness for FAM and WSSO integration 
Proven track record implementing complex applications with FAM and WSSO aligned with engineering best practices 
Excellent written and verbal communication skills, including a strong ability to conceptualized and document complex systems for non-technical audiences 
Troubleshoot and resolve integration and implementation issues 
Bachelor degree or higher with an emphasis in computer science or related discipline 

Preferred Qualifications: 
Knowledge of Oracle Access Management (OAM) 11g 
Familiar with identity management applications (Oracle Identity Manager, Tivoli Identity Manager, Sun Identity Manager, or similar) 
Experience implementing and configuring Oracle Enterprise Manager, Oracle Business Intelligence Publisher and WebLogic 
Successful track record designing and developing J2EE/JEE web applications 
Strong understanding of information security fundamentals in the identity and access management space 

Minimum number of years of experience required: 3 years 

Top 3 - 5 Daily responsibilities 
Design, engineer and execute Central Authentication (CA) on-boardings of client applications to Web Single Sign-on (WSSO) and Federated Access Management (FAM) platforms 
Assist with technical consultation, testing and technical troubleshooting with CA integrations 
Assist with analysing and coordinating business requirements and project schedule alignment 

Top 3 - 5 Required Skills 
Oracle Access Manager 10g technical experience on-boarding applications and configuring policies 
PingFederate 6.x experience on-boarding off-premise and cloud-hosted applications, acting as both the identity provider (IdP) and service provider (SP) 
Identity and access management best practices for authentication and authorization with web-access management platforms, WSSO, federated access management/federated single sign-on (FSSO) 
Technical support experience with Operating Systems (OS) including RedHat Enterprise Linux (RHEL), Windows, various Linux platforms and Unix; web Servers including Apache 2.x, IHS and IIS 
Familiar with controlled-engineering processes and best practices including design documentation (ie Use Case Diagrams, UML, logical and physical design) 

Desired skills 
Oracle Access Manager 11g technical experience on-boarding applications and configuring policies 
Engineering experience with Linux, Unix and Windows server 
Experience developing Java/JEE applications or .NET applications 

Soft Skills 
Verbal and written communication acumen; ability to communicate to the audience (technical and non-technical) 
Collaborate with varying IT and non-IT professionals; understand, educate and align information security strategy across the organization where it pertains to application on-boardings 
Transparency with management and colleagues; must be able to operate somewhat independently, or in a small teams of 1-3 with minimal oversight 

# of people supervised 
0 people supervised by his contract 

Size of the team 
1-3 including this contract position 

Stage of the project 
All technical stages: Analysis, Requirements, Design, Development, Integration support; but not operational post-production support excluding post-production defect resolution 

Educational Requirement: 
Bachelor's degree in a related field or a minimum of 4 years of equivalent work experience. 

Do you require a face to face interview, or will you hire from a phone interview 
Phone-video conference via WebEx 

Can the contractor work remotely or do they need to be onsite. 
Preferably on-site, remotely is OK