Security / IAM Architect

Role overview Define and guide identity and security architecture for an enterprise asset-management system upgrade to a newer application suite running on Red Hat OpenShift. The work centers on replacing a legacy access-management approach with federated identity, establishing secure access across environments, and coordinating implementation and validation with security, platform, application, integration, and testing teams.

Responsibilities - Assess current authentication, authorization, directory, security-group, service-account, and certificate configurations. - Design the target identity and access-management architecture, including federation with directory services and configuration of Keycloak. - Implement and validate SAML, OIDC, OAuth 2.0, single sign-on, multifactor authentication, and token-based patterns. - Map users, groups, and job responsibilities to application roles and permissions, applying least-privilege access. - Define secure identity patterns for integrations, APIs, middleware, mobile applications, service accounts, secrets, certificates, and key rotation. - Document architecture and decisions, maintain traceability between requirements and tests, support security reviews, troubleshoot access issues, and prepare operational guidance.

Requirements - Strong experience designing enterprise identity and access-management or application-security solutions. - Experience with IBM Maximo or Maximo Application Suite security and authorization models. - Hands-on knowledge of Keycloak, including federation, realms, clients, groups, roles, and token configuration. - Familiarity with Active Directory, ADFS or Microsoft Entra ID, SAML, OIDC, OAuth 2.0, JWT, SSO, and MFA. - Understanding of OpenShift or Kubernetes security, including RBAC, secrets, certificates, and service accounts. - Ability to work across technical and security teams, document designs and risks, and support testing and remediation.

Benefits and work setup - The project spans Sandbox, Development, Acceptance, and Production environments and requires alignment with applicable SOX and nuclear security controls.