Redhat Sso Jobs (NOW HIRING)

Job Summary:
Oak Ridge National Laboratory is a U.S. Department of Energy national laboratory focused on addressing the nation’s most pressing challenges. They are seeking an IAM Linux Engineer to join the HPC Infrastructure group, responsible for deploying and managing HPC-scale services in a Linux environment, as well as administering identity and access management services.
Responsibilities:
• Deploy, configure and manage HPC-scale services in a Linux environment, primarily RedHat and Rocky
• Assist in deploying, scaling and maintaining on-premise Kubernetes clusters
• Perform regular patches, updates and backups
• Monitor systems using tools like Nagios and Grafana
• Respond to and assist in troubleshooting issues
• Administration of RSA SecureID and PingFederate servers
• Deploy, configure and support identity and access management services such as single-sign on (SSO), OAuth, two-factor auth, zero trust, etc…
• Maintain and enable secure access for human users and automated workloads in kubernetes
• IdM integration with user applications and Entra ID
• Deploy and manage resources in the NCCS VMware environment
• Automate systems administration tasks using tools like Puppet, Terraform and Ansible
Qualifications:
Required:
• Bachelor’s degree in computer science or closely related field and a minimum of 2 years of experience in Linux systems administration and/or Identity Management, or a Master’s Degree and a minimum of 1 year of experience in Linux systems administration and/or Identity Management.
• An equivalent combination of education and experience will be considered.
• Deploy, configure and manage HPC-scale services in a Linux environment, primarily RedHat and Rocky.
• Assist in deploying, scaling and maintaining on-premise Kubernetes clusters.
• Perform regular patches, updates and backups.
• Monitor systems using tools like Nagios and Grafana.
• Respond to and assist in troubleshooting issues.
• Administration of RSA SecureID and PingFederate servers.
• Deploy, configure and support identity and access management services such as single-sign on (SSO), OAuth, two-factor auth, zero trust, etc…
• Maintain and enable secure access for human users and automated workloads in Kubernetes.
• IdM integration with user applications and Entra ID.
• Deploy and manage resources in the NCCS VMware environment.
• Automate systems administration tasks using tools like Puppet, Terraform and Ansible.
• This position requires the ability to obtain and maintain a clearance from the Department of Energy.
• This position is a Workplace Substance Abuse (WSAP) testing designated position.
Preferred:
• Excellent interpersonal/communication skills and the ability to work within a team.
• Foundational knowledge of modern authentication and authorization standards, including SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP.
• Experience administering Kubernetes on on-premises infrastructure (K3s, RKE2, or similar).
• Experience with GitOps tools and methodologies.
• Familiarity with managing user identities and group memberships in LDAP and Active Directory.
• Understanding of cloud-native IAM concepts (roles, policies, and service accounts) in platforms like AWS, Azure, or GCP.
• Strong working knowledge of Linux system fundamentals and common network protocols.
• Programming and scripting skills in common languages such as Python and bash.
• Understanding of versioning and code review tools like GitHub and GitLab.
• Experience with configuration management tools such as Puppet or Ansible.
• Experience deploying and maintaining virtual environments using VMWare.
• Working knowledge of common infrastructure services such as OpenLDAP, DNS, DHCP, etc…
• Ability to plan, prioritize and complete assigned projects with minimal supervision.
Company:
Oak Ridge National Laboratory holds a range of R&D assignments, from fundamental nuclear physics to applied R&D on advanced energy systems. Founded in 1943, the company is headquartered in Oak Ridge, USA, with a team of 5001-10000 employees. The company is currently Late Stage.