EngineerJobs.io
← Back to all jobs
JPL/NASA

Cybersecurity Engineering and Operations III

JPL/NASA
Pasadena, CA $134k - $160k/yr Full time Posted 3d ago
Active Directory Adfs Cybersecurity Operations Directory And Identity Management Group Policy Identity and Access Management Information Security Information Technology (IT) InfoSec Kerberos Ldap Microsoft Active Directory SAML Security Automation Single Sign On Solution Architecture Windows Windows Server
Apply Now

Job Description

Enterprise Cybersecurity Engineering and Operations III role supporting JPL’s Cybersecurity Services Operations within Identity, Credential, and Access Management (ICAM).

Responsibilities

  • Assist with the development and design of conceptual and detailed system solutions for Identity Management and Directory access requirements across business, flight/mission, and institutional networks.
  • Analyze and produce design concepts, architecture diagrams, and functional/technical requirements for Single Sign-On (SSO), LDAP, Kerberos, and NTLM authentication methods.
  • Manage, upgrade, and maintain JPL Active Directory infrastructure to support security, integrity, and availability.
  • Design and implement Active Directory Group Policies (GPOs) aligned with cybersecurity policies.
  • Administer Windows DNS servers for AD zones and manage WINS servers for NetBIOS records.
  • Perform domain renames and execute AD migrations for infrastructure reconstruction.
  • Integrate NASA PIV smart card authentication with Active Directory to support HSPD-12 compliance.
  • Design and implement Windows Certificate Services (PKI) and ADFS to enable Web SSO for SAML-compliant applications.
  • Provide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service.
  • Develop and implement PowerShell and Visual Basic scripts for automated AD data management and reporting.
  • Coordinate with internal organizations to document requirements and present system concepts.
  • Deliver Level 3 technical support for complex Windows directory and LDAP-related issues affecting developers and customers.
  • Support ICAM functional application enhancements, maintenance, and upgrades, including interfaces to HR and flight systems.
  • Document and track changes using configuration management systems.

Requirements

  • Typically requires one of the following combinations:
    • Bachelor’s degree in computer science or similar discipline with minimum 6 years related experience
    • Master’s degree in similar discipline with minimum 4 years related experience
    • PhD in a similar discipline with minimum 2 years related experience
  • Experience with Windows systems administration (Server 2016/2019/2022) and UNIX environments.
  • Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management improvements.
  • Strong understanding of LDAP schema, directory trees, and LDAP-based authentication configuration for third-party applications.
  • Knowledge of advanced network security principles and techniques, including Least Privilege and Tiered Administration.
  • Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
  • Experience architecting scalable systems.
  • Skilled in creating data flow diagrams, data dictionaries, and technical requirements documentation.
  • Excellent written and verbal communication skills, including ability to lead aspects of technical project development and create user guides/tutorials.

Technologies

  • Single Sign-On (SSO), Lightweight Directory Access Protocol (LDAP), Kerberos, NTLM
  • Active Directory (AD), Active Directory Group Policies (GPOs), Windows DNS, WINS
  • NASA PIV smart card authentication, HSPD-12
  • Windows Certificate Services (PKI), Active Directory Federation Services (ADFS), SAML
  • Samba, Oracle Access Manager (OAM) WebGate, JPLIT directory service
  • PowerShell, Visual Basic
  • Windows Server 2016/2019/2022, UNIX
  • Splunk, Syslog, Windows Event Manager
  • Windows directory, LDAP

Preferred Qualifications

  • Familiarity with Laboratory and NASA policies (e.g., NIST 800-53, FIPS 201).
  • Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
  • Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
  • Understanding of business processes in high-tech environments to design enhancements that streamline authentication and improve user productivity.

Location: Pasadena, CA (onsite)

Compensation: USD 134,056 - 160,160 per year

Similar Jobs