Security – IAM Architect

Job not on LinkedIn

🔥 46 minutes ago

🏛️ District of Columbia, Virginia – Remote

🏛️ District of Columbia – Remote ⚔️ Virginia – Remote

💵 $109.5k - $194.7k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 27 days.

Apply Now

Find Similar Remote Jobs

Accenture Federal Services

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2017

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Accenture Federal Services is a division of Accenture that focuses on delivering technology and consulting services to the U. S. federal government. With capabilities in cloud, cybersecurity, data and artificial intelligence, digital engineering, and emerging technologies, Accenture Federal Services supports federal agencies in achieving mission-critical outcomes through innovation and technological advancement. The company emphasizes building secure, scalable solutions, enhancing decision-making with data-driven insights, and transforming digital infrastructures to meet complex governmental needs. By leveraging advanced R&D and human-centered design, they aim to improve the performance and resilience of government operations.

📋 Description

• Define, validate, and guide implementation of security and identity architecture for the upgrade from Maximo 7.6.1.3 to MAS 9.2 on Red Hat OpenShift • Lead transition from SiteMinder to Keycloak federated with Active Directory, ADFS, or Microsoft Entra ID • Support implementation of SSO, MFA, role-based access, service accounts, certificates, and security controls across Sandbox, Development, Acceptance, and Production environments • Assess current Maximo authentication, authorization, SiteMinder, directory, security-group, service-account, and certificate configurations • Define future-state MAS 9.2 identity and access-management architecture • Design and guide Keycloak federation configuration • Implement and validate SAML, OIDC, OAuth 2.0, SSO, MFA, and token-based authentication patterns • Map users, directory groups, job roles, and business responsibilities to MAS security groups and application permissions • Establish role-based and least-privilege access for users, administrators, developers, support teams, and service accounts • Define authentication and authorization patterns for integrations, APIs, middleware, mobile applications, and boundary systems • Develop standards for privileged access, non-human accounts, credentials, secrets, certificates, and key rotation • Support OpenShift security design, including platform access, RBAC, namespaces, secrets, certificates, and workload identities • Document IAM requirements, security architecture, role mappings, design decisions, risks, and exceptions • Maintain traceability between security requirements, designs, configurations, test cases, and defects in Azure DevOps • Support security reviews, architecture approvals, risk assessments, and remediation planning • Define and support authentication, authorization, role, MFA, certificate, and security-control testing • Assist with segregation-of-duties and access-control validation • Troubleshoot IAM, SSO, token, certificate, service-account, and access issues during build, testing, cutover, and Hypercare • Develop operational runbooks and transfer knowledge to security, platform, application, and support teams • Coordinate with Cybersecurity, Enterprise Architecture, infrastructure, OpenShift, Maximo, integration, testing, and business teams to meet security, SOX, and nuclear requirements

🎯 Requirements

• Strong experience designing enterprise IAM and application-security solutions • Experience with IBM Maximo or Maximo Application Suite security and authorization models • Hands-on knowledge of Keycloak administration, federation, realms, clients, groups, roles, and token configuration • Experience with Active Directory, ADFS, Microsoft Entra ID, SAML, OIDC, OAuth 2.0, JWT, SSO, and MFA • Understanding of Red Hat OpenShift or Kubernetes security, RBAC, secrets, certificates, and service accounts • Experience designing user, administrator, system, integration, and non-human identity controls • Knowledge of least-privilege access, privileged-access management, segregation of duties, and access-governance principles • Experience developing security architecture documents, role matrices, authentication flows, and operational procedures • Strong troubleshooting, analytical, documentation, and stakeholder-management skills • Ability to coordinate across cybersecurity, infrastructure, application, integration, testing, and business teams • Experience upgrading Maximo 7.6.x to MAS 9.x • Experience migrating an application from SiteMinder to Keycloak or another modern identity broker • Familiarity with MAS running on Red Hat OpenShift in an on-premises enterprise environment • Knowledge of Azure DevOps, CI/CD, DevSecOps, automated security scanning, and controlled environment promotion • Experience supporting utilities, nuclear operations, SOX-controlled systems, NQA-1 environments, or other highly regulated organizations • Public Trust clearance level • Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States

🏖️ Benefits

• Collaborative and caring community • Hands-on experience • Certifications • Industry training • Wide variety of benefits • Reasonable accommodations for disabilities or religious observances

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume