Ignite IT is seeking an experienced Senior Identity and Access Management (IAM) Engineer to support enterprise identity and directory services for the U.S. Census Bureau.
This is a hands-on engineering position focused on administering, maintaining, troubleshooting, and upgrading NetIQ OpenText (formerly NetIQ/Novell) eDirectory and Identity Manager (IDM) environments running on Red Hat Enterprise Linux (RHEL).
The ideal candidate will have extensive experience supporting production eDirectory environments, configuring and troubleshooting Identity Manager drivers, managing LDAP integrations and digital certificates, and resolving complex identity provisioning and authentication issues.
The engineer will also support ongoing modernization initiatives involving Okta, AWS GovCloud, and Terraform. However, direct hands-on experience with eDirectory and Identity Manager is required , as these technologies represent the primary responsibilities of the position.
Key Responsibilities:
eDirectory Administration and Support
Administer, maintain, and troubleshoot enterprise OpenText/NetIQ eDirectory environments across production, development, and testing systems.
Manage eDirectory partitions, replicas, schema, auxiliary classes, LDAP server objects, and directory synchronization.
Monitor directory health, investigate replication issues, and resolve authentication, connectivity, and performance problems.
Utilize iManager, iMonitor, Identity Console, and eDirectory command-line utilities for administration and troubleshooting.
Support eDirectory upgrades, migrations, and system maintenance, including testing, validation, and production implementation.
Identity Manager Engineering
Configure, maintain, and troubleshoot OpenText/NetIQ Identity Manager drivers, driver sets, and provisioning workflows.
Develop and modify DirXML Script policies, driver filters, associations, and attribute transformations.
Support identity synchronization between HR systems, Active Directory, LDAP directories, databases, and enterprise applications.
Troubleshoot provisioning and deprovisioning failures, identity data inconsistencies, account synchronization issues, and driver errors.
Use Identity Manager Designer, driver traces, and diagnostic tools to identify and resolve integration issues.
Support Identity Manager upgrades and configuration changes across development, testing, and production environments.
Security, Certificates, and Authentication
Manage eDirectory certificates, key material objects, LDAP server certificates, and application keystores.
Configure and troubleshoot LDAP over SSL/TLS (LDAPS), certificate chains, and authentication failures.
Support certificate renewals, Certificate Signing Requests (CSRs), PKCS#12 files, and certificate management using OpenSSL.
Troubleshoot TLS handshake failures and certificate-related application connectivity issues.
Investigate account lockouts, authentication failures, missing accounts, and identity synchronization issues.
Support Active Directory integrations, including account and group management, Kerberos authentication, and certificate-based authentication.
Linux Administration and Automation
Administer and troubleshoot eDirectory and Identity Manager services running on Red Hat Enterprise Linux.
Perform command-line troubleshooting, service management, log analysis, configuration updates, and system maintenance.
Develop and maintain scripts using Bash and Python, with working knowledge of SQL, to automate recurring operational tasks.
Support infrastructure upgrades, configuration management, and system troubleshooting.
Production Support and Modernization
Investigate and resolve production incidents, service requests, and complex directory-related issues.
Prepare and execute changes through formal change management processes, including Change Advisory Board (CAB) review and post-change validation.
Develop and maintain technical documentation, architecture diagrams, data-flow diagrams, operational…