Federated Single Sign-On Engineer

Kaiser Permanentes Application Systems Management (ASM) group is the organizations center of excellence for the integration, development, maintenance, and support of local, regional, and national software solutions that support Kaiser Permanentes mission to provide quality, affordable care. Its all part of an immense and on-going migration to a national IT systems strategy to better serve our millions of members across the country. Thousands of professionals in two divisions are committed to keeping both our local and national channels of clinical, insurance, financial, and administrative information flowing efficiently and cost-effectively. The Identity and Access Management group was formed to consolidate security operations, security infrastructure engineering, security consulting, directory services, and identity management functions in order to increase the overall effectiveness of the IT security program.

Job Description:

As a Federated Single Sign-On (FSSO) Engineer, you will be responsible for the design, engineering, development, implementation and support of Kaiser Permanentes Enterprise Federated Identity environments (to be comprised of a product compliant with Liberty ID-WSF, Liberty ID-FF, SAML, and WS-Security Frameworks). This environment will integrate with the identity management framework comprised of IBM Directory Servers, IBM Identity Management applications (TIM), and COREid Identity and Access servers. You will analyze project requirements for test and production environments, B2E and B2B Federated Single Sign-On infrastructure design, engineering, implementation consulting, and provide level 3 production support. You will also evaluate FSSO products and other technology enhancements; write documentation for configuration, procedural and technical changes to the environment; and provide technical support. You will also install, configure, test and troubleshoot FSSO software; and participate in directory design, domain design and schema definition work.

Minimum Requirements:

This position requires a BA/BS with 5 years of related experience with complex organizations, 3+ years of senior level development/engineering experience, and direct experience with the design and deployment of one or more FSSO technologies and related protocols (Liberty, WS*, SAML, etc.). You also need knowledge of X.500/LDAP directory technologies; a solid understanding of LDAP meta-directory technologies; experience with Java API and or .NET;LDAP; experience with Unix on the AIX platform; experience with user and system authentication methodologies, data authentication methods, authorization options and data protection methods; and Superior technical written and oral communication skills are also required. MCSE certification or equivalent knowledge of Windows domain and authentication infrastructure is desirable.

Join us and be a part of a team that is revolutionizing the way health care is delivered. The benefits of working for an organization of our size and scope will change your career perspective in a healthy way. For immediate consideration, please apply online at