Senior/Principal Solutions Architect - Enterprise Management Services, Hybrid

Sandia Corporation
Albuquerque, NM, United States
3 months ago
Apply on indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$117,500.0 - $235,700.0
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) Authentication Protocols Automation of Tests C++ (Programming Language) Cyber Security Computer Programming System Configuration Data Integrity Identity and Access Management Python (Programming Language) Lightweight Directory Access Protocols (LDAP) OAuth
+15 more
Ping (Networking Utility) Windows PowerShell Red Hat Enterprise Linux Openid Connect Azure Active Directory Security Assertion Markup Language (SAML) Extensible Markup Language (XML) Scripting Transport Layer Security Google Cloud ReactJS AngularJS Information Technology Patch Management SailPoint

Job description

We are seeking an experienced Solutions Architect to join our dynamic team responsible for managing a large-scale enterprise Product Data Management (PDM) system. This system delivers best-in-class engineering solutions that support our Nuclear Deterrence (ND) and Nuclear Security Enterprise (NSE) customers., * Lead architecture and implementation of Identity Management solutions using SailPoint IdentityIQ, ForgeRock IDM, Ping Federate, and related technologies.

  • Manage identity provisioning, lifecycle, and account/group management applications.
  • Develop automation scripts (PowerShell, Java, Python, C++) to optimize processes and ensure data integrity.
  • Oversee vulnerability patch management and SSL/SSO certificate lifecycle for IAM environments.
  • Collaborate with cross-functional teams to design and improve IAM workflows and automation.
  • Maintain documentation related to IAM processes, policies, and system configurations.
  • Monitor production services and respond to system issues promptly.
  • Ensure compliance with NIST protocols and DOE security standards.
  • Collaborate with infrastructure, application, and governance teams to support enterprise identity services.
  • The selected applicant will work a hybrid schedule, combining onsite and remote work. They must reside within a reasonable commute distance to the assigned work location and be available to work onsite at least three days per week., Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

Requirements

Do you have experience in RHEL?, Do you have a Bachelor’s degree?, * Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience); Plus a minimum 5 years of experience in Identity Access Management.

  • Advanced knowledge in at least one of the following solutions: SailPoint IdentityIQ, ForgeRock IDM, Ping Federate or EntraID.
  • Strong scripting/programming skills in PowerShell, Java, Python, or C++.
  • Red Hat Enterprise Linux experience., * Understanding of identity federation methodologies and configurations.
  • Excellent communication and collaboration skills.
  • Experience with secure EntraID identity solutions with Conditional Access policies.
  • Advanced knowledge of identity federation, HTTP, XML, REST, SCIM protocols.
  • Experience with web application development frameworks (Angular, React).
  • Strong understanding of encryption algorithms and security best practices.
  • Understanding of authentication protocols (SAML, OAuth, OpenID Connect) and directory services (LDAP).
  • Experience managing identities in cloud platforms (AWS IAM, Azure AD, Google Cloud IAM).

Benefits & conditions

4.24.2 out of 5 stars Albuquerque, NM Hybrid work $117,500 - $235,700 a year - Full-time, Pulled from the full job description

  • 401(k)
  • Health insurance
  • Relocation assistance, $117,500 - $235,700
  • Salary range is estimated, and actual salary will be determined after consideration of the selected candidate’s experience and qualifications, and application of any approved geographic salary differential.

About the company

About Sandia

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

  • Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
  • Extraordinary co-workers
  • Some of the best tools, equipment, and research facilities in the world
  • Career advancement and enrichment opportunities
  • Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
  • Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov * These benefits vary by job classification.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:21 min

Exploring the target application for front end tests

Anna Mcdougall · JS Congress

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

2:59 min

Introduction and transitioning into the tech industry

Anna Mcdougall · JS Congress

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

5:06 min

Modernizing legacy applications through proactive leadership

Babette Wagner Babette Wagner · Coffee With Developers

Videos

See all

Related articles

See all