<h3>Job Description</h3>
Cox Automotive is seeking a talented and experienced Senior Cybersecurity Workforce Identity Engineer to join our Identity and Access Management (IAM) team. In this role, you will be responsible for designing, developing, and maintaining identity management and authentication solutions, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA). You will play a critical role in building secure, scalable access systems that enhance user experience while ensuring compliance with security standards and regulatory requirements. Key success factors include: 
<ul>
<li>A deep understanding of IAM technologies, principles, and best practices is essential. This includes familiarity with various IAM solutions, identity management techniques, and secrets management. </li>
<li>Hands-on experience within a workforce and customer authentication environment </li>
<li>A deep understanding of authentication architecture and design </li>
</ul>
 Key Responsibilities 
<ul>
<li>Design and oversee authentication and SSO solutions across enterprise and applications and platforms. </li>
<li>Oversee integrations of identity providers (IdPs) such as Okta, Azure AD, Ping Identity with internal and third-party applications. </li>
<li>Develop and oversee secure authentication mechanisms using protocols such as SAML, OAuth 2.0, OpenID Connect, and Kerberos. </li>
<li>Collaborate with application owners and developers to enable SSO and federated identity integrations. </li>
<li>Implement and enforce multi-factor authentication (MFA) policies and technologies. </li>
<li>Troubleshoot and resolve authentication and access-related incidents. </li>
<li>Document architecture, configurations, and procedures related to authentication and access systems. </li>
<li>Stay current with emerging authentication technologies, threats, and best practices. </li>
</ul>
 Minimum Requirements: 
<ul>
<li>Bachelor's degree in a related discipline and 4 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years' experience; a Ph.D. and up to 1 year of experience; or 16 years' experience in a related field </li>
<li>Must have experience in designing, implementing, and maintaining authentication solutions, ensuring the security of workforce and CIAM personnel </li>
<li>Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders. </li>
<li>Excellent customer service skills, writing, and executive presentation skills. </li>
<li>Ability to develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership. </li>
<li>Ability to evaluate risks and make recommendations based on impact and likelihood of the risk to the business. </li>
</ul>
 Required Technical Skills 
<ul>
<li>Deep understanding of IAM concepts: authentication, authorization, SSO, MFA, RBAC, ABAC. </li>
<li>Experience with IAM platforms such as Okta, Ping Identity, Azure AD, or SailPoint. </li>
<li>Proficiency in modern authentication protocols such as, SAML 2.0, OAuth 2.0, OIDC, Kerberos, Radius </li>
<li>Experience implementing Single Sign-On (SSO) and federated identity solutions. </li>
<li>Knowledge of identity federation standards and cross-domain authentication. </li>
<li>Implementation and management of MFA solutions (e.g., Duo, Microsoft Authenticator, YubiKey, Google Authenticator). </li>
<li>Experience with passwordless authentication (e.g., FIDO2, Windows Hello for Business). </li>
<li>Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA) </li>
<li>Familiarity with identity and access management (IAM) systems and protocols </li>
</ul>
 Preferred Technical Skills 
<ul>
<li>Developing connectors for aggregation and user provisioning along with understanding System for Cross-domain Identity Management (SCIM) in detail. </li>
<li>Deep understanding of federating authentication and how the protocols are implemented. </li>
<li>Deploying identity controls and building conditional access policies in Entra ID. </li>
<li>Knowledge of current cybersecurity and technology architectures such as zero trust. </li>
<li>AWS Well-Architected Framework. </li>
</ul>
 Preferred Qualifications 
<ul>
<li>Automotive industry experience. </li>
<li>Big four consulting or Fortune 500 company experience. </li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA). </li>
</ul>
 USD 99,000.00 - 165,000.00 per year Compensation: Compensation includes a base salary of $99,000.00 - $165,000.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

Senior Cybersecurity Workforce Identity Engineer

<h3>Job Description</h3>
Job Description
Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.
Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team.
ICAM Identity Engineer
We are seeking an ICAM Identity Engineer to provide hands-on technical expertise implementing, configuring, and maintaining enterprise Identity, Credential, and Access Management (ICAM) solutions. The ideal candidate will bring deep technical knowledge of identity security platforms and a commitment to enforcing least-privilege access within complex hybrid environments.
Responsibilities
The ICAM Identity Engineer will be directly responsible for the deployment, configuration, and sustainment of enterprise identity platforms and controls, including:
Identity Provider &amp; Authentication Management
<ul>
<li>Design and implement Microsoft Entra ID Conditional Access policies aligned with Zero Trust principles for Azure and AWS.</li>
<li>Configure and maintain CAC/PKI-based Certificate Authentication and legacy ADFS environments.</li>
<li>Manage Ping Federate as an enterprise federation gateway; onboard applications for SSO using SAML and OIDC; enforce phishing-resistant MFA.</li>
</ul>
Privileged Access Management (PAM)
<ul>
<li>Onboard privileged user, service, and application accounts into Delinea.</li>
<li>Implement policies for credential rotation, session recording, and privileged session monitoring.</li>
<li>Develop and maintain Just-in-Time (JIT) and Just-Enough-Administration (JEA) workflows to reduce standing privileges.</li>
</ul>
Identity Governance &amp; Administration (IGA)
<ul>
<li>Configure SailPoint to automate Joiner-Mover-Leaver processes.</li>
<li>Build and maintain enterprise access catalogs and automated approval workflows.</li>
<li>Execute periodic access certification campaigns for critical roles and applications.</li>
</ul>
Enterprise Directory &amp; Linux Identity Management
<ul>
<li>Use One Identity Active Roles to implement delegated administration and automate AD lifecycle tasks.</li>
<li>Configure Red Hat IdM policies for host-based access control and sudo privileges across Linux servers.</li>
</ul>
Required Qualifications:
<ul>
<li>Demonstrated, hands-on expertise with at least one core ICAM platform (Microsoft Entra ID, enterprise PAM such as Delinea, or enterprise IGA such as SailPoint).</li>
<li>Strong understanding of identity security principles: least privilege, MFA, JIT/JEA, RBAC/ABAC.</li>
<li>Experience with Active Directory administration and Group Policy management.</li>
<li>Ability to design, implement, and troubleshoot complex enterprise security policies.</li>
<li>DoD 8140 compliance at IAT Level II.</li>
</ul>
Preferred:
<ul>
<li>Microsoft Certified: Identity and Access Administrator (SC-300).</li>
<li>Delinea Certified Administrator.</li>
<li>SailPoint Certified IdentityNow Engineer.</li>
<li>Ping Certified Professional.</li>
<li>Experience with Red Hat IdM policy management.</li>
</ul>
EEO Commitment
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

582 ping identity Jobs