ISD Engineer III/IV-ID & Access Management

Overview

To research, evaluate, design, implement, and maintain system and product solutions, applying knowledge of engineering principles. To provide technical direction and engineering support for projects and infrastructure. Develop and maintain advanced functional knowledge of evolving IT engineering industry technologies/competition, concepts and trends. Identity & Access Management: Responsible for the operational implementation and maintenance of access control policies and processes to ensure optimal security of user authentication (both internal and outside users), access rights, access restrictions, account profiles, and passwords.

Responsibilities

• Drives future strategies for enterprise MIAM systems and processes by collaborating with internal business units, external partners & vendors to enhance member experience and ensure flexible and scalable architecture.
• Provides forward-looking industry perspectives, established and emerging product and technology reviews, and sets best practices across Member IAM solutions
• Serve as Subject Matter Experts (SME) in Member/Customer Identity & Access Management (CIAM) and fraud prevention via multiple member-facing channels.
  1. ATM
  2. Branch
  3. Contact Center
  4. Digital (Online & Mobile App)
• Drives the modernization and implementation of Multi-Factor Authentication (MFA, Passwordless, and other emerging Technologies and methodologies
• Ability to administer and provide support for IAM applications such as ForgeRock,  RSA, Daon, Ping, Azure, and SiteMinder components (https://e.g., Policy Servers, Databases, and Directories)
• Design, develop, and maintain Java-based custom-developed authentication journeys using the ForgeRock IAM platform to ensure secure and seamless user authentication and access control. 
• Collaborate with the DevOps team to deploy and manage ForgeRock IAM instances in production and non-production environments. 
• Participate in code reviews and provide constructive feedback to team members to maintain code quality and consistency. 
•  Experience in setup, configuration, and management of Policy servers, Web agents, Secure Proxy Servers, and Federation
•  Develop and support federations with internal systems and external organizations
• Implement changes through multiple environments utilizing the Change Management process
• Develop project plans, scope, schedule, and clear and concise communications
•  Apply engineering principles to the design and enhancement of new and existing systems
• Document new system components or modifications to existing components
• Ensure the security and integrity of system and product solutions, including compliance with Navy Federal, industry engineering, and Information Security principles and practices
• Present clear, organized, and concise information to all audiences through a variety of media to enable effective business decisions
• Perform engineering tasks and assignments in support of business needs
• Perform engineering technology research, procurement, deployment, and configuration for new and modified systems
• Perform other duties as assigned

Qualifications

• Experience that demonstrates a strong knowledge and skill of information security technology focusing on IAM Applications (https://e.g., ForgeRock, RSA, Daon, Ping, Azure, SiteMinder, etc.)
• Experience deploying ForgeRock on Azure Kubernetes Service (AKS)
• Experience supporting multiple IAM environments. Must be confident in implementing, configuring, managing, and deploying IAM products
• Experience and expert knowledge of information security analysis and design techniques
• Effective understanding of data security practices and procedures, including systems analysis, authentication technologies, and access controls. Priorities will be given to those with expert knowledge and skill in UNIX/Linux system administration and scripting, Identity Federation, SAML, JBoss, and Directory Services/LDAP.
• Effective experience in project planning and time management skills
• Strong planning and organizational skills
• Strong research, analytical, and problem-solving skills
• Strong verbal, written, and interpersonal communication skills, including proficiency in negotiating and persuading others
•  Ability to present findings and conclusions clearly and concisely

Desired Qualifications         

• Bachelor's Degree in business, information technology, or related fields
• CISSP, CISA, CCSP, or other related Information Security certifications
• MBA, Master's Degree, PMP, MSCE/MCITP, Linux certifications
• Experience with Agile methodologies (https://e.g., SAFe)
• ForgeRock Identity & Access Specialist or Professional certification(s)
• Experience with multiple open-source authentication protocols, including SAML, OAuth, and OpenID 
• Experience with CA SiteMinder components, policy servers, databases, and directories
• Experience with Ping Identity products
• Experience with Azure Active Directory Federation
• Experience with Kubernetes and Docker services
• Knowledge of the financial services industry
• Experience with the Daon IdentityX Platform
• Strong experience with automated testing for Azure DevOps (ADO) pipelines using Java
• Experience leveraging several libraries and frameworks with tools such as NeoLoad, Selenium or RestAssured

Hours: Monday - Friday, 8:00AM - 4:30PM

Location: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Drive, Pensacola, FL 32526 | 141 Security Drive, Winchester, VA 22602 

Navy Federal is now hybrid! Our standard enterprise requirement for a hybrid schedule is to report on-site 4-16 days each month. The number of days reporting on-site will ultimately be determined by the employee's leadership and business unit needs. You will learn more throughout the hiring and on boarding process.

About Us

You have goals, dreams, hobbies, and things you're passionate about—what's important to you is important to us. We're looking for people who not only want to do meaningful, challenging work, keep their skills sharp and move ahead, but who also take time for the things that matter to them—friends, family, and passions. And we're looking for team members who are passionate about our mission—making a difference in military members' and their families' lives. Together, we can make it happen. Don't take our word for it:

• Military Times 2022 Best for Vets Employers

• WayUp Top 100 Internship Programs

• Forbes® 2022 The Best Employers for New Grads

• Fortune Best Workplaces for Women

• Fortune 100 Best Companies to Work For®

• Computerworld® Best Places to Work in IT

• Ripplematch Campus Forward Award - Excellence in Early Career Hiring

• Fortune Best Place to Work for Financial and Insurance Services

Equal Employment Opportunity: Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans. EOE/AA/M/F/Veteran/Disability EOE/AA/M/F/Veteran/Disability

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.