Identity & Access Management Engineer, Senior

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.

Position Overview:

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Continue your career journey where your work contributes to a greater purpose. 

The Identity and Access Management (IAM) Engineer, Senior is responsible for leading engineering related initiatives to build, enhance, and deliver IAM products and services focused on access management – authentication and authorization. Candidate must be a strategic, thought leader, overseeing, and implementing industry standard best practices applicable to the Freddie Mac’s environment. The lead must oversee the development of security solutions that adhere to applicable policies and comply with information security requirements.

Responsibilities also include working with IT teams to consult and partner on solutions, along with managing control design patterns that enable IT asset owners’ adoption of IAM enterprise authentication solutions.

The candidate will also collaborate with key stakeholders to extend the authentication solutions to technology assets while working with other subject matter experts and engineers.

Our Impact:

We design, build, enhance, and deliver IAM products and services focused on access provisioning, deprovisioning, access reviews, authentication, identity management, privileged access and service account management, monitoring, and reporting. We provide thought leadership, overseeing, and implementing industry standard best practices applicable to the Freddie Mac’s environment.

Your Impact:

• Analyze the Business requirements and come up with design options that align with the technical roadmap and build proof of concepts as needed.

• Design and develop Micro Services based solutions using Java/JEE frameworks, UI frameworks, Docker and Open Shift.

• Work on the technical upgrades/migrations/configurations of Ping product suite to the cloud and assess opportunities for service and process automation, and optimizations.

• Design scaling strategies and develops automation scripts and solutions using technologies like Dockers/ OpenShift/ Kubernetes/EKS and Atlassian tool suite.

• Provide product support when issues are identified either by the Product Team directly or as triaged and raised by the Global Operations

Qualifications:

• Bachelor’s degree in computer science or information systems; or equivalent combination of education and relevant experience

• 5+ years IAM, Web Access Management experience focused on authentication technologies.

• Good hands-on experience using Ping Access, Ping Federate and Ping Directory services.

• Strong background in Java development with experience building, integrating, and supporting APIs, Microservices.

• Hands-on experience scripting in Ansible, Python, Shell/Bash, or PowerShell to automate IAM processes

• Experience developing and managing IAM services using modern DevOps/CI-CD tools(e.g. Jenkins, bitbucket, Docker) to deploy and manage IAM services.

• Strong understanding and experience with OAuth 2.0/2.1, OIDC and SAML 2.0.

• UI development skills on JavaScript, Angular, Velocity and CSS will be a plus.

Keys to Success in this Role:

• Self-starter and willing to take on challenges, initiate and complete tasks with minimal supervision, demonstrating proactive approach to work

• Effective communication, ability to convey technology solutions to business, and customer-focused demeanor

• Ability to quickly comprehend the functions and capabilities of new technologies and identify process improvements, automation and efficiencies opportunities.

Current Freddie Mac employees please apply through the internal career site.

We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job fu