Job DetailsThe Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office is seeking to hire an
Enterprise Cybersecurity Engineer III.
The responsibilities include, but are not limited to the following:
- Assist in the development and design of conceptual and detailed system solutions to meet Identity Management and Directory access requirements for business, flight/mission, and institutional networks.
- Analyze and create design concepts, architecture diagrams, and functional/technical requirements for Single Sign-On (SSO) solutions, Lightweight Directory Access Protocol (LDAP), Kerberos, and NTLM authentication methods.
- Assist in managing, upgrading, and maintaining JPL's Active Directory (AD) infrastructure to ensure security, integrity, and availability. This includes:
- Designing and implementing AD Group Policies (GPOs) in compliance with cybersecurity policies.
- Managing Windows DNS servers for AD zones and WINS servers for NetBIOS records.
- Performing domain renames and AD migrations for infrastructure reconstruction.
- Integrate NASA's PIV smart card authentication with Active Directory to comply with Homeland Security Presidential Directive 12 (HSPD-12).
- Design and implement Windows Certificate Services (PKI) and Active Directory Federation Services (ADFS) to enable Web SSO for SAML-compliant applications.
- Provide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service.
- Develop and implement PowerShell and Visual Basic scripts for automated AD data management and reporting.
- Work with internal organizations to document requirements and present system concepts. Provide Level 3 technical support to developers and customers for complex Windows directory and LDAP-related issues.
- Support analysis of system enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems. Document and track changes using configuration management systems.
Required Qualifications:- Typically requires a bachelor's degree in computer science or a similar discipline with a minimum of 6 years of related experience; or a master's degree in a similar discipline with a minimum of 4 years of related experience; or a PhD in a similar discipline with a minimum of 2 years of related experience.
- Experience in Windows systems administration (Server 2016/2019/2022) and UNIX environments.
- Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management system improvements.
- Strong understanding of LDAP schema, directory trees, and the configuration of LDAP-based authentication for third-party applications.
- Security Principles: Knowledge of advanced principles and techniques in securing networked computer systems, including the application of Least Privilege and Tiered Administration.
- Log Aggregation: Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
- Experience architecting scalable systems. Skilled in creating data flow diagrams, data dictionaries, and technical requirements documentation.
- Excellent written and verbal communication skills; capable of leading aspects of technical project developments and creating user guides/tutorials.
Preferred Qualifications:- Familiarity with Laboratory and NASA policies (e.g., NIST 800-53, FIPS 201).
- Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
- Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
- Understanding business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication.
JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more. Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together. For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee's start date.
For further benefits information click Benefits and Perks
The hiring range displayed below is specifically for those who will work in or reside in the location listed. In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate's job related skills, experience, knowledge, and relevant education/training.
The typical full time equivalent annual hiring range for this job in Pasadena, California.
$134,056 - $160,160
