The Identity, Credential, and Access Management (ICAM) Program is a part of a larger government-wide mandate to address implementation of ICAM security disciplines that enable the right individual to access the right resources, at the right time, for the right reasons. The objective of the Program is to provide oversight and coordinate efforts to implement the processes, policies, and technology necessary to deliver enterprise-wide identity, credential, and access management services across a user base exceeding one million individuals. The Program is responsible for providing ICAM related policy oversight and implementation guidance, managing the ICAM information technology portfolio, driving logical access compliance, and operating enterprise shared services for key ICAM capabilities in support of various enterprise missions. Additionally, the Program is working to modernize and automate service delivery as well as lower its risk to security incidents.
This role will provide support for a large enterprise Identity Provider as a member of the development team, supporting ICAM services in a primarily on-premises environment. Duties include overseeing the development and implementation of a full-stack ICAM web application. You will be expected to develop software, mature development and deployment practices, interface directly with customers, create documentation and reports, and mentor junior engineers. This individual must be able to work in a fast-paced environment and possess the ability to work independently with minimal direct guidance, while conveying a positive can-do attitude.
Responsibilities:
- Work in a full-stack code base that leverages TypeScript and Angular for front-end development and C#/.NET for the back-end and APIs
- Provide subject matter expertise in application design and architecture as well as software development patterns
- Implement and improve DevSecOps practices in the software development and deployment process collaborating with the DevSecOps SME
- Support the QA/Test team’s development and automation of test cases to ensure quality functionality and code in all deliverables
- Effectively communicate concepts and technical guidance to customers/stakeholders that have widely varying technical background
- Gather requirements from stakeholders and understand their needs to determine the best-fitting technical solution
- Facilitate best practices and standardization on team processes for version control, especially with Git and BitBucket
- Identify areas for improvement in code and processes and communicate the need for and value of such improvements
- Act as a mentor to more junior software developers, providing guidance on best practices, development processes, and software design
- Actively engage in code reviews, providing thoughtful feedback to maintain and improve the quality of the code base
- Write and update documentation in Confluence, both low-level technical documentation as well as high-level business descriptions
- In coordination with the project team, design, develop, and groom tasks and test plans; track progress to ensure complete traceability of customer requirements.
Qualifications:
- 3+ years of experience developing in HTML and CSS based on the latest HTML5 and W3C standards
- 3+ years of experience developing and debugging in JavaScript and TypeScript
- 5+ years of experience developing and debugging in a variety of programming languages, especially C#/.NET Core, and Java
- 5+ years of experience working at various levels of the software stack, including web development, data persistence, and end-user authentication
- 5+ years of experience working on teams leveraging an Agile software development approach
- 5+ years of experience developing applications and working in environments that must conform to federal security compliance requirements such as NIST SP 800-53 or DISA STIGs
- Ability to perform basic web server configuration, such as rewrite rules on a variety of web server software, including Apache HTTPD and Microsoft IIS
- A desire to integrate and automate development, security, and operations responsibilities with members of a cross-functional team
- Understanding of the principles of a migration to a cloud architecture
- Knowledge of the principles of software testing, especially end-to-end testing, unit testing, and integration, with an ability to apply the principles to a variety of programming languages and frameworks
- An understanding of writing and testing code in Angular 10, ensuring that the front-end Angular application can query APIs
- A solid understanding of code versioning technologies such as GIT, SVN, and Mercurial
- Ability to use CSS (and CSS preprocessors, such Sass) to develop web layouts that match designer visions at a range of screen resolutions that support responsive design
- Solid grasp of working with data structures such as Objects and Arrays
Must have:
- A Bachelor’s degree in relevant area, at least 5 years’ experience
- Ability to obtain a U.S. Government clearance (Public Trust)
Nice to have:
- Experience developing applications that run in containerized environments, preferably with Kubernetes or OpenShift
- Familiarity with automating administration of Windows Server 2012R2 and 2016
- Understanding of Linux system administration and automation using shell scripts
- Experience configuring and automating CI/CD tools and pipelines for both automated testing and deployments
- Experience leveraging and automating the execution of static security analysis tools like Sonar Scanner and dynamic application security testing tools such as OWASP ZAP
- Experience creating and delivering product demos to a variety of stakeholders, including clients and end users
- Experience creating and delivering presentations on product status and roadmaps
- Knowledge of identity and access management principles, including building applications that integrate with IdPs that communicate both using SAML and OIDC/OAuth2, especially with identity management tools such as SailPoint, CA SiteMinder, and CA API Gateway.
- Experience leveraging a comprehensive approach to logging frameworks
- Experience installing, maintaining, and upgrading NPM package
ABOUT EASY DYNAMICS
Easy Dynamics has nearly two decades of hands-on experience designing, deploying, and managing cybersecurity solutions across organizations of every size. We are builders, problem solvers, and trusted advisors who bring well-architected solutions and management consulting to our clients to align them with the best practices their missions demand. As industry leaders, we are committed to delivering unparalleled quality and service in all aspects of our organization and providing our customers with outstanding technical excellence and the business acumen to advise them on both tactical and strategic initiatives.Easy Dynamics’ culture is best described as “East Coast address, West Coast attitude, driven by a unique combination of talented individuals who routinely deliver with innovation, and technical excellence.
By building a world-class team of engineers and subject-matter experts, we’ve cemented our standing as a trusted provider of next-generation identity and risk management solutions. Other core capabilities include Velum Cloud delivery, automation and resilience.Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal state or local laws.
