Advanced Cyber Security Architect/Engineer- Single Sign On

Honeywell is a leading software-industrial company focused on addressing critical challenges around energy, safety, and security. The Advanced Cyber Security Architect/Engineer will join the Cybersecurity team to provide secure user experiences and work with Single Sign-On technologies, ensuring alignment with best practices and standards.

Responsibilities:

• Serve as a subject matter expert for SSO services under the IAM services portfolio
• Understand how the service works from a business/end-user/technical perspective
• Have command of the service including its capabilities and proper use
• Execute proof-of-concepts guided by Sr. Identity Architect and Service Manager
• Complete assigned project/tasks in a timely manner
• Interact with key stakeholders and project/program teams to understand their requirements and engineer solutions based on best practices
• Ensure proper oversight for quality assurance of IAM artifacts
• Enforce adherence to architectural standards/principles
• Proactively provide feedback regarding infrastructure IAM engineering methodologies, standards, and leading projects
• Minimize technical exposure and risk on projects
• Delivers and manages a highly available, stable, and secure Directory Services environment
• Deliver solutions to meet functional and non-functional requirements
• Contribute to and execute tasks within the service backlog
• Create design packages
• Develop, test, and deploy code packages
• Maintain accurate and timely tracking of activities
• Understand the art of the possible, compares various architectural options based on feasibility/impact and proposes actionable plans
• Demonstrated strong analytical skills and technical problem-solving skills
• Analyzes and resolves complex issues (e.g. performance problems and outages) to the Directory Services environments, escalating to and working with vendors and clients as required
• Ability to analyze and operate at different levels of abstraction
• Ability to balance what is strategically right with what is practically realistic
• Evangelize optimal options based on documented best practices and standards
• Maintain accurate and timely tracking of activities
• Manage incident/problem lifecycle including ticketing and stakeholder interaction
• Performs proactive problem management to identify and resolve potential issues related to the Directory environments
• Follow documented troubleshooting procedures for standard support situations
• Escalate to and collaborate with tier 3 support, when necessary
• Monitor the service from both a functional and infrastructure perspective
• Execute service reports and gather/report metrics
• Address service problems
• Document changes and/or new activities
• Works under supervision of the Sr. Cyber Security Manager, and interacts with Senior/Portfolio Architect

Requirements:

• Bachelor's or graduate degree in a computer-related field such as Computer Science, Computer Information Systems or equivalent
• 5+ years of experience with Identity and Access Management (SSO, LDAP)
• Experience with identity provider technologies such as Ping Federate, Okta, Azure AD etc
• Experience with SAML, OAuth, OpenID Connect
• Understanding of encryption, certificates, and digital signatures
• Experience in developing Java web applications (J2EE)
• Web development with HTML, JavaScript, CSS, JQuery, Bootstrap, etc
• SQL database design and optimization (including query)
• Technical design and development skills
• Strong analytical and technical problem-solving skills
• Familiarity with various requirements gathering techniques
• Knowledge and experience in IT/development methodologies and life cycles
• Experience building/supporting solutions for mission-critical, distributed applications
• Experience with multi-tier system development for large enterprises
• Exposure to infrastructure and application security technologies and approaches
• Experience with directories such as LDAP and Active Directory
• Knowledge of cloud concepts and design
• Experience with service-oriented design
• Unix/Linux knowledge
• Interpersonal communication and organizational skills