<h3>Job Description</h3>
Job Description
The Nuclear Company is the fastest growing startup in the nuclear and energy space creating a never before seen fleet-scale approach to building nuclear reactors. Through its design-once, build-many approach and coalition building across communities, regulators, and financial stakeholders, The Nuclear Company is committed to delivering safe and reliable electricity at the lowest cost, while catalyzing the nuclear industry toward rapid development in America and globally.
Principal Digital Identity Engineer
Position Overview
The Principal Digital Identity Engineer is a senior technical leadership role responsible for designing, implementing, and maintaining enterprise-level digital identity and access management systems. This position requires deep expertise in identity governance, authentication protocols, and security frameworks to ensure secure and seamless access to digital resources across the organization.
Responsibilities
Technical Leadership &amp; Architecture
<ul>
<li>Design and architect enterprise-wide digital identity management solutions including identity governance, access management, and authentication systems</li>
<li>Lead implementation of IAM platforms, single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) solutions</li>
<li>Develop and maintain identity lifecycle management processes from provisioning to de-provisioning</li>
<li>Establish standards for identity federation, directory services, and authentication protocols (SAML, OAuth, OpenID Connect, LDAP)</li>
</ul>
Security &amp; Compliance
<ul>
<li>Ensure compliance with regulatory requirements and industry standards for identity management and data protection</li>
<li>Implement security best practices for identity verification, authentication, and authorization</li>
<li>Conduct security assessments and risk analysis for identity systems</li>
<li>Develop policies and procedures for identity governance and administration</li>
</ul>
Innovation &amp; Continuous Improvement
<ul>
<li>Drive adoption of modern identity management technologies including decentralized identity, biometrics, and zero-trust architectures</li>
<li>Automate identity processes to improve efficiency and reduce manual overhead</li>
<li>Evaluate and recommend new identity technologies and vendor solutions</li>
</ul>
Experience
<ul>
<li>Bachelor's in Computer Science, Information Security, Engineering, or related field (Master's preferred)</li>
<li>12+ years experience in identity and access management, information security, or related fields</li>
<li>5+ years in senior/lead engineering role with technical leadership</li>
<li>Expert knowledge of IAM platforms (Okta, Azure AD, Ping Identity, ForgeRock, SailPoint)</li>
<li>Deep understanding of authentication protocols (SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos)</li>
<li>Proficiency in directory services (Active Directory, Azure AD, LDAP)</li>
<li>Experience with privileged access management (PAM) and identity governance solutions</li>
<li>Strong understanding of cryptography, PKI, and certificate management</li>
<li>Knowledge of cloud identity services (AWS IAM, Azure AD, GCP Identity)</li>
<li>Experience with scripting and automation (Python, PowerShell, or similar)</li>
<li>Understanding of security frameworks (NIST, ISO 27001, CIS Controls)</li>
<li>Knowledge of compliance requirements (GDPR, HIPAA, SOC 2)</li>
<li>Experience with zero-trust security models</li>
</ul>
Preferred Experience
<ul>
<li>CISSP, CISM, CISA, or vendor-specific IAM certifications</li>
<li>Experience in highly regulated industries (nuclear, healthcare, finance, government)</li>
<li>Knowledge of emerging identity technologies (decentralized identity, blockchain-based identity, biometrics)</li>
<li>Experience with DevSecOps practices and CI/CD pipelines</li>
<li>Contributions to open-source identity projects or industry standards</li>
</ul>
This role is critical to ensuring secure, efficient, and compliant access to digital resources across the organization while maintaining the highest standards of security and user experience.
Benefits
<ul>
<li>Competitive compensation packages</li>
<li>401k with company match</li>
<li>Medical, dental, vision plans</li>
<li>Generous vacation policy, plus holidays</li>
</ul>
Estimated Starting Salary Range The estimated starting salary range for this role is $198,000 - $228,000 annually less applicable withholdings and deductions, paid on a bi-weekly basis. The actual salary offered may vary based on relevant factors as determined in the Company's discretion, which may include experience, qualifications, tenure, skill set, availability of qualified candidates, geographic location, certifications held, and other criteria deemed pertinent to the particular role. 
EEO Statement The Nuclear Company is an equal opportunity employer committed to fostering an environment of inclusion in the workplace. We provide equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic. We prohibit discrimination in all aspects of employment, including hiring, promotion, demotion, transfer, compensation, and termination.
Export Control Certain positions at The Nuclear Company may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in The Nuclear Company limiting its consideration of certain applicants.

Recruiting Fraud AlertYour safety is our priority. We want to ensure your job search stays secure. Please note that the team at The Nuclear Company only communicates through official @thenuclearcompany.com email addresses. We will never ask for payments or sensitive financial information at any stage of our recruitment process. For your peace of mind, please verify all openings and submit your applications directly through our official careers page: Careers

Principal Digital Identity Engineer

<h3>Job Description</h3>
Job Description
The Identity and Access Management (IAM) Engineer is accountable for the design, implementation, and operational integrity of enterprise identity and access management capabilities that protect critical business systems while enabling secure and efficient access for the workforce. This role serves as the technical authority for authentication, authorization, identity lifecycle management, and privileged access across on-premises and cloud environments.
The IAM Engineer ensures automated Joiner/Mover/Leaver processes, enforces least-privilege and Zero Trust principles, and integrates IAM services with enterprise applications and infrastructure. Working closely with Cybersecurity, IT Infrastructure, HR, and application owners, the role delivers scalable, compliant identity solutions, supports audit and regulatory requirements (e.g., SOX, NERC CIP, ISO), and provides operational support for identity-related security incidents.
The position acts as a subject-matter expert and trusted advisor to IT and Security leadership, reducing identity risk, improving control effectiveness, and enabling secure digital operations.
A strong customer service focus, positive attitude, and excellent communication skills are essential.
Responsible for compliance with all applicable laws, regulations, industry standards, corporate policies, guidelines, and procedures, including but not limited to RUS, OSHA, SOX, NERC, FERC, and ITS requirements. Promotes an environment of compliance and continuous improvement to meet the Corporation's goals and objectives.
Job Duties:
<ul>
<li>Identity Architecture &amp; Engineering: Design, implement, and operate enterprise IAM solutions across on-premises and cloud environments, including SSO, MFA, conditional access, RBAC, directory services, and application integrations. Ensure solutions are scalable, secure, and aligned with Zero Trust principles.</li>
<li>Identity Lifecycle Management: Own and continuously improve Joiner/Mover/Leaver processes using authoritative identity sources. Implement role- and attribute-based access models and automation to ensure timely provisioning and deprovisioning while reducing manual effort and risk.</li>
<li>Privileged Access Management (PAM): Implement and operate PAM solutions for administrative and service accounts, enforcing least privilege, credential vaulting, session monitoring, and secure break-glass access. Support audits, investigations, and forensic reviews related to privileged access.</li>
<li>Governance, Risk &amp; Compliance: Support access reviews, audits, and regulatory assessments. Maintain IAM documentation, standards, and procedures. Identify and remediate identity-related risks and control gaps.</li>
<li>Security Operations Support: Assist with identity-related incident response activities. Investigate authentication anomalies, improve IAM logging and monitoring, and enhance alerting and detection capabilities.</li>
<li>Collaboration &amp; Technical Leadership: Serve as the IAM subject-matter expert. Provide technical guidance to peers, influence application onboarding with identity-first design principles, and advise IT and Security leadership on identity strategy and risk reduction.</li>
</ul>
Required Qualifications:
Education: Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field from an accredited college or university.
Certifications (Preferred but not required): 
<ul>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Microsoft Certified: Identity and Access Administrator Associate</li>
<li>Microsoft Certified: Cybersecurity Architect Expert</li>
<li>Okta Certified Professional / Administrator</li>
<li>GIAC Identity and Access Management (GIAM)</li>
</ul>
Experience:
<ul>
<li>Identity and Access Management Engineer III
<ul>
<li>Experience: Minimum of 4 years of experience implementing and operating enterprise IAM solutions, including SSO, MFA, identity lifecycle management, and directory services.</li>
<li>Responsibility: Independently manages IAM platforms and integrations. Owns Joiner/Mover/Leaver workflows, supports access reviews and audits, and resolves identity-related incidents. Contributes to IAM standards, documentation, and continuous improvement initiatives.</li>
</ul>
</li>
<li>Identity and Access Management Engineer IV
<ul>
<li>Experience: Minimum of 6 years of experience designing and managing enterprise IAM and PAM solutions across hybrid and cloud environments.</li>
<li>Responsibility: Leads IAM projects and enhancements, including application onboarding and PAM implementations. Designs role- and attribute-based access models, supports complex audits and compliance activities, and provides technical leadership across IT and Cybersecurity teams.</li>
</ul>
</li>
<li>Identity and Access Management Engineer V
<ul>
<li>Experience: Minimum of 8 years of experience architecting and managing enterprise-scale IAM and PAM solutions in complex environments.</li>
<li>Responsibility: Oversees major IAM initiatives and identity architecture decisions. Serves as the senior technical authority for IAM and PAM, advises leadership on identity risk and strategy, and drives enterprise adoption of Zero Trust and least-privilege principles.</li>
</ul>
</li>
</ul>
Specialized Skills: 
<ul>
<li>Technical Expertise
<ul>
<li>Hands-on experience with enterprise IAM platforms such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, or ForgeRock</li>
<li>Strong knowledge of SSO, MFA, conditional access, RBAC, ABAC, and Zero Trust architectures</li>
<li>Experience integrating IAM with Azure, AWS, and/or GCP</li>
<li>Working knowledge of Active Directory, Azure AD, LDAP, and identity synchronization</li>
<li>Experience with Privileged Access Management solutions and secure service account management</li>
</ul>
</li>
<li>Tools &amp; Technologies
<ul>
<li>IAM and PAM platforms</li>
<li>Scripting and automation (PowerShell, Python preferred)</li>
<li>Logging and monitoring integrations with SIEM platforms</li>
<li>ITSM tools such as ServiceNow or Ivanti</li>
</ul>
</li>
<li>Security &amp; Compliance
<ul>
<li>Understanding of identity-related regulatory and compliance requirements (e.g., SOX, NERC CIP, ISO 27001)</li>
<li>Experience supporting audits, access certifications, and control remediation</li>
</ul>
</li>
<li>Soft Skills
<ul>
<li>Strong analytical and problem-solving skills</li>
<li>Excellent written and verbal communication skills</li>
<li>Customer-focused, collaborative mindset</li>
<li>Ability to work independently and influence across teams</li>
</ul>
</li>
</ul>

 Job Posted by ApplicantPro

Identity & Access Management Engineer (Levels III - V)

<h3>Job Description</h3>
Job Description
Hi,

This is Siva for Tekgence. We are looking for a job opportunity for a IAM PingFederate Consultant. Please get back to me ASAP with your resume.

Role name: IAM PingFederate Consultant

Location: Raleigh, NC / Charlotte, NC

Experience (Years): 8-10

Competencies: Cyber Security - IAM Professional Services

Role Description:

<ul>
<li>Minimum of 5 years of experience in identity and access management (IAM) and federated identity solutions.</li>
<li>Hands-on experience with PingFederate, including installation, configuration, and integration</li>
<li>Strong knowledge of authentication protocols such as SAML, OAuth, OpenID Connect, and LDAP</li>
<li>Highly skilled Ping Federated Architect to design, implement, and manage identity federation solutions using PingFederate</li>
<li>The ideal candidate will have extensive experience in identity and access management (IAM), Single Sign-On(SSO), and federated authentication protocols</li>
<li>Proficiency in scripting languages (e.g., Python, PowerShell) for automation</li>
<li>Familiarity with REST APIs, web services, and middleware technologies</li>
</ul>

Desirable Skills:

<ul>
<li>Architect and implement federated identity solutions using PingFederate</li>
<li>Design and configure SSO, OAuth, OpenID Connect, SAML, and other federated authentication protocols</li>
<li>Integrate PingFederate with enterprise applications, cloud services, and third-party systems</li>
<li>Brainstorm and design the solution for B2B &amp; B2C federation requirement to meet CIAM capabilities. </li>
<li>Document the design proposals and follow QFD to identity the right solution</li>
<li>Finalize the Design and complete reviews and solution. </li>
<li>Deliver design and implementation applying federation concepts focusing B2B &amp; B2C solutions as per the requirements</li>
<li>Deliver work items related to P1AS product which includes PingFederate policy design, Ping directory, Ping MFA and Ping protect</li>
<li>Complete and deliver work items related to SSO service capabilities as per the requirements</li>
<li>Work and deliver minor UI changes, API, Java Programming and jQuery as required for the project</li>
<li>Strong communication and interpersonal skills.</li>
<li>Experience with hybrid identity solutions and integration.</li>
<li>Experience with third-party migration tools and methodologies.</li>
<li>Ability to work independently and as part of a team.</li>
<li>Strong organizational skills and attention to detail.</li>
<li>Continuous learner with a passion for staying updated with the latest industry trends and technologies.</li>
<li>Ping Federated Architect; Identity and access management (IAM); federated identity solutions</li>
</ul>

"Tekgence is an equal opportunity employer. Applicants must be authorized to work in the U.S. U.S. citizens and Green Card holders are strongly encouraged to apply."
<a href="http://www.tekgence.com" target="_blank">www.tekgence.com</a>

Siva Kumar 
Account Head 
e: <a href="mailto:siva.r@tekgence.com" target="_blank">siva.r@tekgence.com</a>
o:+14698567142 * 292
655 Deseo Dr Suite 104 Irving, TX 75039

IAM ( Ping Federate ) , Raleigh, NC / Charlotte, NC

<h3>Job Description</h3>
Senior Identity Services Engineer_ New York City, NY, PA, CT, NJ Full-Time (FTE)Direct Hire
 
Position: Senior Identity Services Engineer
Job Type: Full-Time (FTE)
Location: New York City-NY
Office space available at location listed
 The candidate would need to live in the following states NY, PA, CT, NJ
 Industry: Healthcare / Health Services - Medical Records / IT / Informatics
 Job Category: Information Technology - Security
Base Salary: $97,000 to $145,000 +Best-in-class benefits

Preferred Qualifications:

 * Hands-on experience with the Ping Identity platform, particularly:
 * PingFederate, PingOne, PingID, PingDirectory
 * Experience with MFA and Passwordless/FIDO2/WebAuthn authentication strategies
 * Experience building and configuring enterprise SSO applications in Azure AD / Entra ID
 * Exposure to IAM orchestration platforms such as PingOne DaVinci or similar tools
 * Experience supporting cloud identity integrations (Azure, AWS, GCP)
 * Familiarity with enterprise SSO in hybrid environments (on-prem and cloud-based apps)
 * Strong documentation and communication skills
 * Comfortable collaborating across technical and non-technical teams
 * Ability to lead projects and mentor junior engineers
Required Qualifications:
 * 5+ years of Identity &amp; Access Management experience with a strong focus on SSO and federation

Deep technical knowledge of:
 * PingFederate, Azure AD, Okta, ADFS
 * Federation protocols including SAML, OIDC, and OAuth2
 * LDAP, Active Directory, SCIM
 * Proficiency in scripting and development with PowerShell, Python, and Java
 * Experience working with REST APIs for IAM services; familiarity with Postman or similar tools
 * Familiarity with OGNL expression language for customizing PingFederate policies
 * Front-end UX design and customization using HTML, CSS, and JavaScript
 * Basic Linux administration skills for maintaining and managing IAM infrastructure
 * Working knowledge of certificates and PKI (X.509, certificate chains, signing, encryption, keystore management)
 * Strong troubleshooting and debugging skills across application, identity, and network layersx
 * Understanding of modern identity concepts such as Zero Trust, adaptive authentication (risk-based, device/user signals), and conditional access

Candidate Details:
 *5+ to 7 years experience
 *Seniority Level - Mid-Senior
 *Minimum Education - High School Diploma or Equivalent
 *Willingness to Travel - Occasionally

Senior Identity Services Engineer

<h3>Job Description</h3>
Must Haves: 
<ul>
<li>Experience designing, developing, and implementing CIAM solutions integrating with various systems and platforms</li>
<li>Hands-on experience with CIAM IDP tools such as Okta, Ping, or equivalent</li>
<li>Knowledge of orchestration tools like PingOne DaVinci or Transmit Security FlexID</li>
<li>Strong understanding of identity protocols (OIDC, OAuth, SAML, AD-Fed, API Gateways, SCIM)</li>
<li>Experience implementing and managing SSO, MFA, FIDO authentication, PAM, and Identity Governance &amp; Administration</li>
</ul>
 
Stand out skills from others:
<ul>
<li>Experience with Okta and Transmit Security is a plus</li>
<li>Ability to provide technical leadership and mentorship</li>
</ul>
 
Responsibilities
<ul>
<li>Collaborate with business units, developers, vendors, and security engineers</li>
<li>Integrate with third-party software and on-premises infrastructure</li>
<li>Ensure high availability and seamless user experience</li>
<li>Conduct impact analysis, analyze data, and create work effort estimates</li>
<li>Lead automation and process improvement initiatives</li>
<li>Support CIAM infrastructure upgrades, patches, and performance tuning</li>
<li>Maintain compliance with industry standards and best practices</li>
</ul>

Identity and Access Management Engineer 4840

<h3>Job Description</h3>
Job Description
Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities. 
By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.
Kentro is hiring an ICAM Lead Identity Engineer to support a DOD USSOCOM opportunity. The Identity (Cyber) Engineer is a hands-on technical specialist responsible for the implementation, configuration, and management of the core platforms that secure user and system identities across the enterprise. This role focuses on the "hands-on-keyboard" execution of deploying and maintaining the security policies and controls within the organization's Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions. The ideal candidate will have deep technical expertise in one or more of these domains and a strong commitment to implementing least-privilege access in a complex hybrid environment.
Responsibilities (Hands-on Implementation):
Identity Provider and Authentication Management:
<ul>
<li>Microsoft: Design, build, test, and deploy Microsoft Entra ID Conditional Access policies to enforce Zero Trust principles for access to cloud resources in Azure and AWS. Configure and maintain Certificate-Based Authentication (CBA) for CAC/PKI. Manage and troubleshoot the on-premises ADFS environment for legacy application support.</li>
<li>Ping Federate: Configure and manage the Ping Federate platform as an enterprise federation gateway. Onboard new applications for Single Sign-On (SSO) using SAML and OIDC. Build and maintain authentication policies to enforce strong, phishing-resistant MFA.</li>
</ul>
Privileged Access Management (PAM):
<ul>
<li>Delinea: Perform the hands-on onboarding of all privileged user, service, and application accounts into the Delinea vault.</li>
<li>Configure and enforce Delinea policies for credential rotation, session recording, and monitoring.</li>
<li>Build and implement Just-in-Time (JIT) and Just-Enough-Administration (JEA) access request and approval workflows to eliminate standing privileges.</li>
</ul>
Identity Governance and Administration (IGA):
<ul>
<li>SailPoint: Implement and configure the automation of the Joiner-Mover-Leaver (JML) identity lifecycle process, replacing manual, ticket-based systems.</li>
<li>Build and maintain the enterprise access catalog in SailPoint to replace the manual IMT48 form with an automated, workflow-driven request and approval system.</li>
<li>Configure and execute periodic access certification campaigns for critical applications and privileged roles.</li>
</ul>
AD and Linux Identity Management:
<ul>
<li>One Identity ARS: Use the Active Roles console to implement secure, delegated administration for Active Directory, creating policies to automate user/group lifecycle tasks.</li>
<li>Red Hat IdM: Centrally manage authorization policies for the Linux estate, defining Host-Based Access Control (HBAC) rules and sudo policies to control access to RHEL servers.</li>
</ul>
Location: Onsite in Tampa, FL
Position Duration: The duration of this role is 18 months from project commencement, with the possibility of extension (Project expected to commence in January 2026). 
Requirements
<ul>
<li>Deep, hands-on experience with at least one of the following core platforms: Microsoft Entra ID, an enterprise PAM solution (e.g., Delinea), or an enterprise IGA solution (e.g., SailPoint).</li>
<li>Strong understanding of core identity security principles, including least privilege, MFA, JIT/JEA, and RBAC/ABAC.</li>
<li>Experience with Active Directory administration and group policy management.</li>
<li>Ability to implement and troubleshoot complex security policies within enterprise tools.</li>
<li>DoD 8140 Compliance (IAT Level III)</li>
</ul>
Clearance:
<ul>
<li>Must have active TS/SCI clearance</li>
</ul>
Benefits
The Company
We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.
We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015) and two CMMI ML 3 ratings (DEV and SVC).
Industry Recognition
Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.
Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner – Mid-Size Companies, Companies Owned by People of Color; Department of Labor’s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award
Benefits
We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.
We work hard; we play hard. Kentro is committed to incorporating fun into every day. We dedicate funds for activities – virtual and in-person – e.g., we host happy hours, holiday events, fitness &amp; wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy.
Commitment Equal Opportunity Employment &amp; VEVRAA 
Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law.
Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.
As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.
We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility.
Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.
How to Apply
To apply to Kentro Positions- Please click on the: “Apply for this Job” button at the bottom of this Job Description or the button at the top: “Application.” Please upload your resume and complete all the application steps. You must submit the application for Kentro to consider you for a position. If you need alternative application methods, please email <a href="mailto:careers@kentro.us" target="_blank">careers@kentro.us</a> and request assistance. 
Accommodations
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email <a href="mailto:careers@kentro.us" target="_blank">careers@kentro.us</a>. 
#LI-JG1

ICAM Lead Identity Engineer (TS/SCI)

<h3>Job Description</h3>
Job Description
Job Title
IAM Access Operations Specialist (Active Directory &amp; Identity Services)
Work Arrangement:&nbsp;Hybrid (3 days onsite / 2 days remote)
Location: Louisville, KY preferred; open to Houston, Atlanta, Dallas, Boise
Employment Type:&nbsp;Contract – 12-month backfill (extension possible)
&nbsp;
Position Overview
The IAM Access Operations Specialist is responsible for day-to-day identity and access management operations across a large enterprise environment. This role is operations-focused, supporting user, group, and access lifecycle management in a primarily on-premises Active Directory environment, with integration to cloud identity platforms.
This is not a security operations or SOC role. The focus is on access provisioning, directory administration, and identity platform support, ensuring users have the right access at the right time while maintaining stability of core identity services.
The ideal candidate has hands-on experience supporting Active Directory and enterprise IAM platforms and is comfortable working in a ticket-driven, operational environment.
Key Responsibilities
Identity &amp; Access Operations
<ul>
<li>
Perform user, group, and computer lifecycle management (joiner/mover/leaver) in Active Directory
</li>
<li>
Administer organizational units (OUs), group memberships, and managed service accounts
</li>
<li>
Support role-based access models and access requests across enterprise applications
</li>
<li>
Troubleshoot account, authentication, and authorization issues
</li>
</ul>
Active Directory &amp; Windows Services
<ul>
<li>
Support Active Directory Domains and Trusts (multi-domain / multi-forest environments)
</li>
<li>
Administer:
<ul>
<li>
AD Sites &amp; Services
</li>
<li>
Group Policy Objects (GPOs)
</li>
<li>
DNS and DFS
</li>
</ul>
</li>
<li>
Manage NTFS and network share permissions
</li>
<li>
Perform AD object recovery and restores when required
</li>
<li>
Support Windows Server environments up to Server 2022
</li>
</ul>
Identity Platforms &amp; Integrations
<ul>
<li>
Support and maintain integrations with:
<ul>
<li>
Entra ID (Azure AD)
</li>
<li>
Okta Universal Directory
</li>
<li>
Office 365
</li>
</ul>
</li>
<li>
Assist with Azure AD Connect synchronization, troubleshooting sync and attribute issues
</li>
<li>
Support federated authentication services (ADFS)
</li>
<li>
Work with additional IAM platforms as needed (e.g., Ping, ForgeRock)
</li>
</ul>
Automation &amp; Tooling
<ul>
<li>
Use PowerShell to support identity operations, reporting, and automation
</li>
<li>
Support identity monitoring and auditing tools (e.g., Change Auditor)
</li>
<li>
Assist with directory recovery and resilience tooling (e.g., Semperis)
</li>
</ul>
Operational Support
<ul>
<li>
Work closely with centralized IAM, infrastructure, and application teams
</li>
<li>
Communicate primarily via Microsoft Teams in a distributed support model
</li>
<li>
Participate in a global on-call rotation, primarily supporting the APAC region
</li>
</ul>
Required Qualifications
Experience
<ul>
<li>
3+ years supporting identity and access management or directory services in a large enterprise
</li>
<li>
Hands-on experience with Active Directory administration
</li>
<li>
Experience supporting Entra ID and Okta in an operational capacity
</li>
<li>
Experience in multi-domain or multi-forest environments
</li>
</ul>
Technical Skills
<ul>
<li>
Strong working knowledge of:
<ul>
<li>
Active Directory administration
</li>
<li>
Group Policy
</li>
<li>
DNS and authentication fundamentals
</li>
</ul>
</li>
<li>
Experience with access provisioning and de-provisioning
</li>
<li>
Proficiency with PowerShell for operational tasks
</li>
<li>
Familiarity with IGA platforms (e.g., SailPoint) is a plus
</li>
<li>
Basic understanding of Linux/Unix environments
</li>
</ul>
Nice to Have (Not Required)
<ul>
<li>
Experience in regulated or compliance-driven environments
</li>
<li>
Familiarity with PKI or certificate services
</li>
<li>
Exposure to PAM/PIM tools
</li>
</ul>
Additional Notes
<ul>
<li>
This role is primarily on-prem Active Directory focused, with limited cloud emphasis
</li>
<li>
The position supports operational identity services, not security monitoring or incident response
</li>
<li>
Strong documentation, consistency, and operational discipline are critical
</li>
<li>
Extension beyond the initial contract term may be available
</li>
</ul>
Company DescriptionLarge global automotive client, one of the most recognized global luxury brands in the world. 
<h3>Company Description</h3>
Large global automotive client, one of the most recognized global luxury brands in the world.

IAM Access Operations Specialist (Active Directory & Identity Services

<h3>Job Description</h3>
Cox Automotive is seeking a talented and experienced Senior Cybersecurity Workforce Identity Engineer to join our Identity and Access Management (IAM) team. In this role, you will be responsible for designing, developing, and maintaining identity management and authentication solutions, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA). You will play a critical role in building secure, scalable access systems that enhance user experience while ensuring compliance with security standards and regulatory requirements. Key success factors include: 
<ul>
<li>A deep understanding of IAM technologies, principles, and best practices is essential. This includes familiarity with various IAM solutions, identity management techniques, and secrets management. </li>
<li>Hands-on experience within a workforce and customer authentication environment </li>
<li>A deep understanding of authentication architecture and design </li>
</ul>
 Key Responsibilities 
<ul>
<li>Design and oversee authentication and SSO solutions across enterprise and applications and platforms. </li>
<li>Oversee integrations of identity providers (IdPs) such as Okta, Azure AD, Ping Identity with internal and third-party applications. </li>
<li>Develop and oversee secure authentication mechanisms using protocols such as SAML, OAuth 2.0, OpenID Connect, and Kerberos. </li>
<li>Collaborate with application owners and developers to enable SSO and federated identity integrations. </li>
<li>Implement and enforce multi-factor authentication (MFA) policies and technologies. </li>
<li>Troubleshoot and resolve authentication and access-related incidents. </li>
<li>Document architecture, configurations, and procedures related to authentication and access systems. </li>
<li>Stay current with emerging authentication technologies, threats, and best practices. </li>
</ul>
 Minimum Requirements: 
<ul>
<li>Bachelor's degree in a related discipline and 4 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years' experience; a Ph.D. and up to 1 year of experience; or 16 years' experience in a related field </li>
<li>Must have experience in designing, implementing, and maintaining authentication solutions, ensuring the security of workforce and CIAM personnel </li>
<li>Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders. </li>
<li>Excellent customer service skills, writing, and executive presentation skills. </li>
<li>Ability to develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership. </li>
<li>Ability to evaluate risks and make recommendations based on impact and likelihood of the risk to the business. </li>
</ul>
 Required Technical Skills 
<ul>
<li>Deep understanding of IAM concepts: authentication, authorization, SSO, MFA, RBAC, ABAC. </li>
<li>Experience with IAM platforms such as Okta, Ping Identity, Azure AD, or SailPoint. </li>
<li>Proficiency in modern authentication protocols such as, SAML 2.0, OAuth 2.0, OIDC, Kerberos, Radius </li>
<li>Experience implementing Single Sign-On (SSO) and federated identity solutions. </li>
<li>Knowledge of identity federation standards and cross-domain authentication. </li>
<li>Implementation and management of MFA solutions (e.g., Duo, Microsoft Authenticator, YubiKey, Google Authenticator). </li>
<li>Experience with passwordless authentication (e.g., FIDO2, Windows Hello for Business). </li>
<li>Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA) </li>
<li>Familiarity with identity and access management (IAM) systems and protocols </li>
</ul>
 Preferred Technical Skills 
<ul>
<li>Developing connectors for aggregation and user provisioning along with understanding System for Cross-domain Identity Management (SCIM) in detail. </li>
<li>Deep understanding of federating authentication and how the protocols are implemented. </li>
<li>Deploying identity controls and building conditional access policies in Entra ID. </li>
<li>Knowledge of current cybersecurity and technology architectures such as zero trust. </li>
<li>AWS Well-Architected Framework. </li>
</ul>
 Preferred Qualifications 
<ul>
<li>Automotive industry experience. </li>
<li>Big four consulting or Fortune 500 company experience. </li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA). </li>
</ul>
 USD 99,000.00 - 165,000.00 per year Compensation: Compensation includes a base salary of $99,000.00 - $165,000.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

793 ping identity Jobs