Kerberos Engineer Jobs

1 job found

Today

Cybersecurity Engineering and Operations III

JPL/NASA Pasadena, CA

Pasadena, CA

Today

$134k - $160k/yr Full time Active Directory Adfs Cybersecurity Operations

Apply Now

Job Description

Enterprise Cybersecurity Engineering and Operations III role supporting JPL’s Cybersecurity Services Operations within Identity, Credential, and Access Management (ICAM).

Responsibilities

Assist with the development and design of conceptual and detailed system solutions for Identity Management and Directory access requirements across business, flight/mission, and institutional networks.
Analyze and produce design concepts, architecture diagrams, and functional/technical requirements for Single Sign-On (SSO), LDAP, Kerberos, and NTLM authentication methods.
Manage, upgrade, and maintain JPL Active Directory infrastructure to support security, integrity, and availability.
Design and implement Active Directory Group Policies (GPOs) aligned with cybersecurity policies.
Administer Windows DNS servers for AD zones and manage WINS servers for NetBIOS records.
Perform domain renames and execute AD migrations for infrastructure reconstruction.
Integrate NASA PIV smart card authentication with Active Directory to support HSPD-12 compliance.
Design and implement Windows Certificate Services (PKI) and ADFS to enable Web SSO for SAML-compliant applications.
Provide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service.
Develop and implement PowerShell and Visual Basic scripts for automated AD data management and reporting.
Coordinate with internal organizations to document requirements and present system concepts.
Deliver Level 3 technical support for complex Windows directory and LDAP-related issues affecting developers and customers.
Support ICAM functional application enhancements, maintenance, and upgrades, including interfaces to HR and flight systems.
Document and track changes using configuration management systems.

Requirements

Typically requires one of the following combinations:
- Bachelor’s degree in computer science or similar discipline with minimum 6 years related experience
- Master’s degree in similar discipline with minimum 4 years related experience
- PhD in a similar discipline with minimum 2 years related experience
Experience with Windows systems administration (Server 2016/2019/2022) and UNIX environments.
Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management improvements.
Strong understanding of LDAP schema, directory trees, and LDAP-based authentication configuration for third-party applications.
Knowledge of advanced network security principles and techniques, including Least Privilege and Tiered Administration.
Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
Experience architecting scalable systems.
Skilled in creating data flow diagrams, data dictionaries, and technical requirements documentation.
Excellent written and verbal communication skills, including ability to lead aspects of technical project development and create user guides/tutorials.

Technologies

Single Sign-On (SSO), Lightweight Directory Access Protocol (LDAP), Kerberos, NTLM
Active Directory (AD), Active Directory Group Policies (GPOs), Windows DNS, WINS
NASA PIV smart card authentication, HSPD-12
Windows Certificate Services (PKI), Active Directory Federation Services (ADFS), SAML
Samba, Oracle Access Manager (OAM) WebGate, JPLIT directory service
PowerShell, Visual Basic
Windows Server 2016/2019/2022, UNIX
Splunk, Syslog, Windows Event Manager
Windows directory, LDAP

Preferred Qualifications

Familiarity with Laboratory and NASA policies (e.g., NIST 800-53, FIPS 201).
Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
Understanding of business processes in high-tech environments to design enhancements that streamline authentication and improve user productivity.

Location: Pasadena, CA (onsite)

Compensation: USD 134,056 - 160,160 per year

View full job page →

Get Kerberos Engineer Jobs alerts

New Kerberos Engineer Jobs, daily.