Identity and Authentication Security Engineer

Identity And Authentication Security EngineerThe Identity and Authentication Security Engineer/Admin will be responsible for technical support to security technologies supporting implementation and evolution and operations of the multi-layer authentication infrastructure. The Identity and Authentication Security Engineer/Admin will provide onsite and remote support to the District Authentication Systems (Secure Multi-factor, Active Directory, Public Key Infrastructure (PKI) solutions, S/Mime, SSL). He/she will partner with system and application teams including Enterprise Architecture to determine/create integration strategies/patterns that allow secure access across district programs and applications. Provide support services to define security requirements, identify the appropriate configuration for each unique District environment, and perform tasks associated with the day-to-day operations and maintenance on installed Cyber Security systems and applications.Required Skills:Experience with Secure Authentication Systems, deployment and operationExperience with Managed Public Key Infrastructure (PKI) Solution, deployment and operationExperience with Wireless Authentication, OTP and multi-factor authentication platformsExperience with Active Directory, LDAP, Radius, NTLM, SAML, AADL, IWA and Open directory platformsExperience with RSA Secure ID, Cisco ACS, SecureAuth, OneLogin, OktaExperience with strong authentication technologies and protocols (PKI, S/Mime, SSL)Troubleshooting, Scanning & Analysis toolsNetworking and Network OperationsQualifications:Bachelor of Science in Electrical Engineering, Computer Science, Information Technology, or equivalent data security and networking experience requiredCISSP, CISM, or relevant IPS Vendor training/certification preferredBackground check and credit check will be requiredExperience and Skills:Server Administration background – Windows and/or Linux/UnixKnowledge of network security architecture concepts, including topology, protocols, components, and principles (e.g., application of defense-in-depth).Knowledge of defense-in-depth principles and network security architecture.Knowledge of communication methods, principles, and concepts that support network infrastructureSkill in implementing the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise IT architectureSkill in analyzing and securing an enterprise architectureKnowledge of engineering conceptsSkill in integrating and supporting information system security architectureSpecific Tasks:Analysis, design, configuration, implementation, documentation and operation of Intrusion Prevention System devices.Manage system deployments, upgrades, ongoing maintenance and operations.Configuration and operation of security device authentication, management & logging platforms.Assist in requirement gathering related to implementation of security infrastructure technology solutions across enterprise and service provider networks.Provide Tier3 support for NOC personnel troubleshooting network issues.Identify, troubleshoot, and resolve complex network connectivity issues as well as advise on network security related issues.Provide occasional off-hours support for planned maintenance work and unplanned support issues. May occasionally require on-site work at a data center during off-hours.Responsibilities:Coordinates IT project management, engineering, maintenance, QA, and risk management.Plans, coordinates, and monitors project activities.Develops technical applications to support users.Develops, implements, maintains and enforces documented standards and procedures for the design, development, installation, modification, and documentation of assigned systems.Provides training for system products and procedures.Performs application upgrades.Performs, monitoring, maintenance, or reporting on real- time databases, real-time network and serial data communications, and real-time graphics and logic applications.Troubleshoots problems.Ensures project life-cycle is in compliance with District standards and procedures.Minimum Education/Certification Requirements:Bachelor's degree in Information Technology or related field or equivalent experienceSkills Required:Prior experience as technical support to security technologies for implementation, evolution and operations of the authentication infrastructureExperience with Secure Authentication Systems, deployment and operationExperience with Managed Public Key Infrastructure (PKI) Solution, deployment and operationExperience with strong authentication technologies and protocolsPrior hands on experience with PKIPrior hands on experience with S/MimePrior hands on experience with SSLExperience with Active DirectoryExperience with LDAPExperience with RadiusExperience with NTLMExperience with SAMLExperience with AADLExperience with IWAExperience with Open directory platformsExperience/familiarity with one or more of these technologies: RSA Secure ID, Cisco ACS, SecureAuth, OneLogin, Okta16+ yrs planning, coordinating, and monitoring project activities16+ yrs leading projects, ensuring they are in compliance with established standards/procedures