Cybersecurity Engineering and Operations III

Job description

Job Details New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL. Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence. The Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office is seeking to hire an Enterprise Cybersecurity Engineer III . The responsibilities include, but are not limited to the following: Assist in the development and design of conceptual and detailed system solutions to meet Identity Management and Directory access requirements for business, flight/mission, and institutional networks. Analyze and create design concepts, architecture diagrams, and functional/technical requirements for Single Sign-On (SSO) solutions, Lightweight Directory Access Protocol (LDAP), Kerberos, and NTLM authentication methods. Assist in managing, upgrading, and maintaining JPL’s Active Directory (AD) infrastructure to ensure security, integrity, and availability. This includes: Designing and implementing AD Group Policies (GPOs) in compliance with cybersecurity policies. Managing Windows DNS servers for AD zones and WINS servers for NetBIOS records. Performing domain renames and AD migrations for infrastructure reconstruction. Integrate NASA’s PIV smart card authentication with Active Directory to comply with Homeland Security Presidential Directive 12 (HSPD-12). Design and implement Windows Certificate Services (PKI) and Active Directory Federation Services (ADFS) to enable Web SSO for SAML-compliant applications. Provide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service. Develop and implement PowerShell and Visual Basic scripts for automated AD data management and reporting. Work with internal organizations to document requirements and present system concepts. Provide Level 3 technical support to developers and customers for complex Windows directory and LDAP-related issues. Support analysis of system enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems. Document and track changes using configuration management systems. Required Qualifications: Typically requires a bachelor’s degree in computer science or a similar discipline with a minimum of 6 years of related experience; or a master’s degree in a similar discipline with a minimum of 4 years of related experience; or a PhD in a similar discipline with a minimum of 2 years of related experience. Experience in Windows systems administration (Server 2016/2019/2022) and UNIX environments. Advanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management system improvements. Strong understanding of LDAP schema, directory trees, and the configuration of LDAP-based authentication for third-party applications. Security Principles: Knowledge of advanced principles and techniques in securing networked computer systems, including the application of Least Privilege and Tiered Administration. Log Aggregation: Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager. Experience architecting scalable systems. Skilled in creating data flow diagrams, data dictionaries, and technical requirements documentation. Excellent written and verbal communication skills; capable of leading aspects of technical project developments and creating user guides/tutorials. Preferred Qualifications: Familiarity with Laboratory and NASA policies (e.g., NIST 800-53, FIPS 201). Experience working with Oracle programmers to support Oracle authentication management and interface functionality. Deep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment. Understanding business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication. JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more. Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together. For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date. For further benefits information click Benefits and Perks The hiring range displayed below is specifically for those who will work in or reside in the location listed. In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate’s job related skills, experience, knowledge, and relevant education/training. The typical full time equivalent annual hiring range for this job in Pasadena, California. $134,056 - $160,160 JPL is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, citizenship, ancestry, age, marital status, physical or mental disability, medical condition, genetic information, pregnancy or perceived pregnancy, gender, gender identity, gender expression, sexual orientation, protected military or veteran status or any other characteristic or condition protected by Federal, state or local law. In addition, JPL is a VEVRAA Federal Contractor. EEO is the Law. EEO is the Law Supplement Pay Transparency Nondiscrimination Provision The Jet Propulsion Laboratory is a federal facility. Due to rules imposed by NASA, JPL will not accept applications from citizens of designated countries or those born in a designated country unless they are U.S. Citizens, Legal Permanent Residents of the U.S or have other protected status under 8 U.S.C. 1324b(a)(3). The Designated Countries List is available here .