Identity and Authentication Security Engineer

Identity And Authentication Security EngineerComtech is a woman-owned small business founded in 1998 and headquartered in Reston, VA. We offer IT solutions across the disciplines of program/project management, applications development, infrastructure, Cyber security, and enterprise content/data management services. We have developed our methodologies and processes based on the IT Infrastructure Library (ITIL) v.3 Framework across enterprise infrastructure operations. These methodologies and processes are reinforced through our organization's externally accredited certifications, which include ISO 9001:2008 Quality Management System (QMS), ISO/IEC 20000-1:2011 IT Service Management Systems (SMS, corporate ITIL certification), ISO 27001:2005 Information Security Management System (ISMS), and CMMI-DEV Level 3Job DescriptionJob Title: Identity and Authentication Security EngineerJob Location: Washington, DCThe Identity and Authentication Security Engineer/Admin will be responsible for technical support to security technologies supporting implementation, evolution and operations of the multi-layer authentication infrastructure.The Identity and Authentication Security Engineer/Admin will provide onsite and remote support to the District Authentication Systems (Secure Multi-factor, Active Directory, Public Key Infrastructure (PKI) solutions, S/Mime, SSL). He/she will Partner with system and application teams including Enterprise Architecture to determine/create integration strategies/patterns that allow secure access across district programs and applications.Provide support services to define security requirements, identify the appropriate configuration for each unique environment, and perform tasks associated with the day-to-day operations and maintenance on installed Cyber Security systems and applications.Must'sExperience with Managed Public Key Infrastructure (PKI) Solution, deployment and operation – 5yrsPrior hands on experience with S/Mime and SSL – 5yrsExperience with Radius, LDAP, SAML, AADL and IWA – 5yrsExperience/familiarity with one or more of these technologies: RSA Secure ID, Cisco ACS, SecureAuth, OneLogin, Okta – 5yrsExperience with Open directory platforms – 5yrsQualificationsRequired SkillsExperience with Secure Authentication Systems, deployment and operationExperience with Managed Public Key Infrastructure (PKI) Solution, deployment and operationExperience with Wireless Authentication, OTP and multi-factor authentication platformsExperience with Active Directory, LDAP, Radius, NTLM, SAML, AADL, IWA and Open directory platformsExperience with RSA Secure ID, Cisco ACS, SecureAuth, OneLogin, OktaExperience with strong authentication technologies and protocols (PKI, S/Mime, SSL)Troubleshooting, Scanning & Analysis toolsNetworking and Network OperationsQualificationsBachelor of Science in Electrical Engineering, Computer Science, Information Technology, or equivalent data security and networking experience required.CISSP, CISM, or relevant IPS Vendor training/certification preferred.