Location: Chicago, IL and unanticipated location throughout the U.S.
Position Responsibilities:
- Oversee and implement comprehensive IT security procedures across client environments, ensuring compliance with corporate, government, and industry regulations. Develop and enforce detailed security protocols, including access controls, data protection, and sensitive information destruction. Lead a security administrator team, ensuring adherence to client and company security policies and procedures. Install IAM Productions on Red Hat Linux in development, staging, and production environments. Architectural design and implementation/exposing of dozens of REST and SOAP based identity API to end applications/developers. Create Open SSL Certificates for external services to achieve the purpose of maintaining confidentiality and message integrity. Manage partnerships via Secure AUTH on a day-to-day basis, which involves provision users to cloud applications using Secure AUTH 3rd party plugins. Infrastructure procurement, pre-requisites deployment, and environments preparation for ForgeRock services deployment. Install and configure ForgeRock Open AM, IDM, DS and IG for proxy-based authentication. Implement data sync between Forgerock OpenDJ and CA Siteminder Directory. Implement SAML SSO integrations with ForgeRock. Set up Open AM authentication modules with multiple data stores and chains according to application requirements. Build and Configure servers with replication across multiple data centers for consumers and dealers. Drive CIAM services migration from ForgeRock to Okta. Involved in architecture design review sessions, information security/risk reviews, legal and compliance review and documented finalized business/technical requirements. Drive SAML/ OIDC/ OAuth configuration for Okta CIAM services. Migrate the data from EDirectory to Okta Universal Directory. Involved in setting up Okta MFA and MFA policies/ Single sign on Policies and Password Policies. Responsible for vault creation and vaulting privileged ForgeRock and Okta Service account credentials in Centrify PAM. Responsible for deploying Monitoring services for infrastructure, API, security and audit logs and applications using Dynatrace, QRadar and CRIBL. Provide subject matter expertise on security procedures and audit compliance, guiding less experienced personnel. Travel and relocation possible to unanticipated client locations throughout the U.S. Telecommuting permitted from anywhere in the U.S.
Required Skills & Experience:
- Master’s or foreign equivalent degree in Computer Science, Software Engineering, Information Network and Computer Security, or a related field and 4 years of experience in the job offered or 4 years of experience in the related occupation of Principal Security Compliance, Systems Engineer (Security), Subject Matter Expert, Technical Support Executive or equivalent. Prior experience must include 4 years with: ForgeRock OpenAM, OPENDJ, OPENIDM, OKTA, EDirectory, Okta Universal Directory, API, OpenSSO, Spring Security, Oauth 2.0, SAML, LDAP, Active Directory, Java, JBOSS, HTML, AWS, Unix, Dynatrace, Service Now, IBM QRadar, Centrify PAM, VeraCode, Postman, Ready API, Github, One Drive, CRIBL, Jira, Confluence, Lucid, and RSA Archer. Travel and relocation possible to unanticipated client locations throughout the U.S. Telecommuting permitted from anywhere in the U.S.