JPL/NASA in Pasadena, CA is hiring an Enterprise Cybersecurity Engineering and Operations professional within the Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office. In this onsite role, you will help design, implement, and operate identity, directory, and authentication solutions that support business, flight/mission, and institutional networks. You will also provide Level 3 support for complex Windows directory and LDAP issues, with opportunities to strengthen security, integrity, and availability across the organization.
What you’ll do
- Contribute to conceptual and detailed system solutions for Identity Management and Directory access requirements across business, flight/mission, and institutional networks.
- Analyze requirements and produce design concepts, architecture diagrams, and functional/technical requirements for SSO, LDAP, Kerberos, and NTLM authentication methods.
- Assist in managing, upgrading, and maintaining JPL’s Active Directory (AD) infrastructure to support security, integrity, and availability.
- Design and implement AD Group Policies (GPOs) in compliance with cybersecurity policies.
- Manage Windows DNS for AD zones and WINS servers for NetBIOS records.
- Perform domain renames and AD migrations to support infrastructure reconstruction.
- Integrate NASA PIV smart card authentication with Active Directory to align with HSPD-12.
- Design and implement Windows Certificate Services (PKI) and ADFS to enable Web SSO for SAML-compliant applications.
- Provide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service.
- Develop and implement PowerShell and Visual Basic scripts to automate AD data management and reporting.
- Collaborate with internal organizations to document requirements and present system concepts.
- Deliver Level 3 technical support for complex Windows directory and LDAP-related issues for developers and customers.
- Support analysis of enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems.
- Document and track changes using configuration management systems.
Required background
- Typically requires a degree and experience combination such as a bachelor’s degree with 6+ years related experience, or a master’s degree with 4+ years, or a PhD with 2+ years in a similar discipline.
- Windows systems administration experience (Server 2016/2019/2022) and UNIX environment exposure.
- Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management improvements.
- Strong understanding of LDAP schema, directory trees, and configuring LDAP-based authentication for third-party applications.
- Knowledge of advanced security principles for networked computer systems, including Least Privilege and Tiered Administration.
- Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.
- Experience architecting scalable systems.
- Ability to create data flow diagrams, data dictionaries, and technical requirements documentation.
- Excellent written and verbal communication skills, including the ability to lead aspects of technical project development and create user guides/tutorials.
Tools and technologies
SSO, LDAP, Kerberos, NTLM, Active Directory (AD), GPO, Windows DNS, WINS, NASA PIV, HSPD-12, PKI, ADFS, SAML, Samba, Oracle Access Manager (OAM) WebGate, JPLIT directory service, PowerShell, Visual Basic, Windows Server 2016/2019/2022, UNIX, Splunk, Syslog, Windows Event Manager, Windows directory, LDAP.
Preferred qualifications
- Familiarity with Laboratory and NASA policies (including NIST 800-53 and FIPS 201).
- Experience working with Oracle programmers to support Oracle authentication management and interface functionality.
- Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.
- Understanding of business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication.
Salary: USD 134,056 - 160,160 per year. Location: Pasadena, CA (onsite).
