Identity And Access Management Engineer

Identity & Access Management is an important security and infrastructure operations component of HP Inc. Team members of HP IAM work across the organization to deliver solutions that help the business by automating processes, performing data analysis, and representing good security practices.

The successful candidate will be responsible for creating and supporting federations with the PingFederate solution. Candidate will work with senior staff in supporting, troubleshooting, and sustaining the existing PingFederate Product suite. Candidate will work with HP Cybersecurity to ensure solutions meet security and compliance requirements. Candidates must be familiar with Identity and Access Management solutions, methodologies, and best practices. Candidates should have knowledge of code development, OGNL expression building, and automation solutions. Candidates must be ready and open to working in a collaborative environment, as they are expected to work closely with team members. Candidate must possess relationship-building skills to form close working relationships with business and application teams.

Primary Responsibilities:

• Work with HP Application teams to help troubleshoot SSO issues and bring solutions to cross-system issues.
• Attend meetings with application teams to help define SSO onboarding requirements for applications and then assist in implementing federations to meet those requirements.
• Extend knowledge across identity platforms to help support the larger HP IAM Team.
• Maintain and support the PingFederate Product suite along with the senior staff.
• Work with HP IT leadership to sustain identity and access management as a value-add service.
• Support HP IAM and application teams 24/7 during on-call duties.
• Ensure all current solutions and new developments are implemented securely and compliantly that meets HP Cybersecurity Policies.

Required Qualifications:

• Experience with common web access management domain-related skills(e.g., understanding the concepts of cookies, sessions, header/cookie variables, HTTP traffic flow/analysis, etc.)
• Experience in cross-application integration using PingFederate and PingID APIs.
• Experience in reading, creating, and modifying OGNL, composite adapters, authentication policies, and policy fragments in PingFederate.
• Experience using ELK Stack/Splunk or other log collection/analysis tools to design and deploy dashboards, aggregated queries, and alerts.
• Experience in writing technical and non-technical documentation.
• 5+ years of experience in creating PingFederate connections(SAML/OAuth, OIDC/OpenToken/ReferenceID).
• Knowledge of authentication and authorization protocols such as Kerberos, SAML, OAuth/OIDC, WS-Fed/WS-Trust, RADIUS, SCIM, etc.
• Experience in configuring PingFederate Adapters(IdP & SP), Selectors, Datastores, PCVs, Certificates, etc.
• Demonstrate self-motivation, decisiveness, and a positive teamwork attitude.
• Knowledge of Amazon Web Services(AWS).
• Contribute to the development of IAM Automation processes for support of daily operations and the gathering of metric and reporting information.
• 3+ years of experience with PingID MFA.
• Knowledge of PingOne Gateways(LDAP & RADIUS)
• Knowledge of PingOne DaVinci and PingOne Risk Management.
• Ability to communicate effectively, manage multiple tasks, and follow through on commitments.
• A four-year computer science or related technical degree.
• Server Administration (Unix/RHEL/Windows) Experience.
• Understanding of DNS, TCP/IP protocols, clustering, load balancing, and firewalls.
• Ability to accept constructive criticism and debate opposing viewpoints to arrive at the best solution for the platform.
• Experience in PingFederate Infrastructure Upgrades
• Willingness to learn new technologies and concepts.
• Ability to troubleshoot, resolve and find the root cause of issues promptly, even under pressure.
• Ability to work on complex technical solutions and environments.
• Experience in HTML and CSS coding.

Preferred Qualifications:

• Knowledge of Java/J2EE and familiarity with WebServices(SOAP/REST APIs, JSON, WSDL)
• Experience in writing shell scripts or Python scripts.
• Knowledge of PKI, MSP, PAM, and IGA solutions.
• Knowledge of Passwordless Authentication and Zero Trust.
• Knowledge of modern authentication standards such as WebAuthn & FIDO2.
• Knowledge of PingAccess & other PingIdentity Product Suite.
• Knowledge of CICD and DevOps tools like Jenkins, Terraform, Kubernetes, Docker, and Github.
• Knowledge of using Postman to run APIs
• Knowledge of Active Directory, LDAP, and Azure AD.