Senior CIAM Engineer

<p><b><span>Please be aware that this position requires you to work nontraditional hours, with shifts scheduled from 2:00 PM to 10:00 PM CET </span><span>to collaborate in real-time with colleagues in the US. </span></b></p><p></p><p><b><span>What You Will Do:</span></b></p><ul><li>Direct responsibilities on the operational team for developing and maintaining integrated strategies and solutions, with a focus on Web Access Management services for the Global Aegon environment.  Web Access Management services include the following core technologies: Okta Auth0, Ping, IBM ISAM, and Federation Services.</li><li>Identify opportunities for using Web Access Management to leverage single sign-on security with an emphasis on cost <span>containment/reduction</span> strategies.</li><li>Provide assistance in project management and feasibility analysis on potential future projects.</li><li>Support Web Access Management Systems applications and Integrations.</li><li>Assist in documentation highlighting integration, design, and SSO features of solutions.</li><li>Provide technical assistance for internal/external customer engagements. Assist in automation and building repeatable patterns for consumption.</li><li>Perform day-to-day operations to maintain SLAs and business functions</li><li>Runs small to medium enterprise infrastructure projects from requirements gathering to post-implementation.</li><li>Helps in the performance and availability of the Web Services environment through monitoring, patching, software tools, and process improvements</li><li>Complies with information security policies</li><li>Solid knowledge of project management methodologies; able to manage project phases or less complex projects</li><li>Provide documentation highlighting integration, design, and features of solutions.</li></ul><p></p><p><b><span>What You Will Need: </span></b></p><p><b><span>Qualifications</span></b></p><ul><li>Knowledge and experience in working with IBM Security Access Manager and Okta Auth0</li><li>Experience in delivering technology solutions at an enterprise level.</li><li>Diagnostic and troubleshooting skills, and the ability to excel under pressure</li><li>Developed written and verbal skills, assignment, and priority flexibility, and time management skills</li><li>Understanding of DNS, TCP/IP addressing, and networking (Internet, routers, switches)</li><li>Knowledge of Web Services, Web and Application Services, Java and .NET technologies, and cloud services.</li><li>Background in scripting, and code development such as PowerShell, Ansible, Java, Terraform, etc.</li><li>Ability to work in teams on small to medium projects.</li><li>Excellent understanding of cloud and on-prem-based infrastructure solutions and their Access Management needs.</li><li>Ability to quickly learn and apply new concepts.</li><li>Ability to drive and achieve consensus/support from large diverse groups. </li><li>Written and verbal communication skills enabling effective articulation of strategy.</li><li>Able to understand how concepts apply to design or architectural efforts</li><li>Enterprise network security technologies including firewalls, IDS, IPS, NAC, WAF, and Web Proxies</li><li>Working knowledge of Certificate/CA/PKI infrastructure</li><li>Possesses and applies broad knowledge of concepts and principles or exhibits technical expertise related to server infrastructure and web-based application support.</li><li>A four-year computer science or related technical degree or a minimum of 5 (five) years of solid related work experience.</li><li>The breadth of knowledge across many technology disciplines; including various access management solutions</li><li>5+ years of progressive-related IT experience.</li></ul><p></p><p><b><span>Preferred</span></b></p><ul><li>Experience in federation using SAML 2.0, Open ID connect, REST, and oAuth standards</li><li>Understanding of SDS and experience with managing HA replicas</li><li>Managing environments 500K-1MM external users</li><li>Understanding of SAML and SSO federated identities</li><li>Experience with installing, upgrading, and configuring Okta Auth0, ISAM/Security Access Manager/WebSEAL version 7.x, ISAM 9-10</li><li>Access Management: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access</li><li>Understanding of microservices-based architecture, API-based system integration, and Amazon Web Services cloud Identity &amp; Access</li><li>Understanding of working in a hybrid cloud environment and working knowledge of AWS Cloud Principles.</li><li>Knowledge in scripting, code development such as PowerShell, Ansible, Java, .NET, etc., and automating developments by code</li><li>Ability to work in teams on small to medium projects.</li><li>Excellent understanding of cloud and on-prem-based infrastructure solutions and their Access Management needs.</li><li>Understanding of microservices-based architecture, API-based system integration, and Amazon Web Servic