Security / IAM Architect
Accenturefederalservices · Washington, DC
About this role
**Security / IAM Architect** **About Accenture Federal Services** At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer—and life better for people. Join a collaborative, caring community where you can grow through hands-on experience, certifications, and training. --- **The Job** As a **Security/IAM Architect**, you will define, validate, and guide the implementation of security and identity architecture for the upgrade from **Maximo 7.6.1.3 to MAS 9.2** on **Red Hat OpenShift**. You will lead the transition from **SiteMinder to Keycloak**, federated with **Active Directory, ADFS, or Microsoft Entra ID** using **SAML and OIDC**. You will support **SSO**, **Multi-Factor Authentication (MFA)**, **role-based access**, **service accounts**, **certificates**, and security controls across **Sandbox, Development, Acceptance, and Production** environments. You’ll work closely with Cybersecurity, Enterprise Architecture, infrastructure, OpenShift, Maximo, integration, and testing teams to ensure the solution meets security standards and applicable **SOX** and **nuclear requirements**. --- **Job Responsibilities** - Assess current **Maximo** authentication/authorization, **SiteMinder**, directory, security groups, service accounts, and certificate configurations - Define the future-state **MAS 9.2** identity and access-management architecture - Design and guide **Keycloak federation** with Active Directory, ADFS, or Microsoft Entra ID - Implement and validate **SAML, OIDC, OAuth 2.0, SSO, MFA**, and token-based authentication patterns - Map users, directory groups, job roles, and business responsibilities to MAS security groups and application permissions - Establish **role-based** and **least-privilege** access for end users, admins, developers, support teams, and service accounts - Define authentication/authorization patterns for integrations, APIs, middleware, mobile apps, and other boundary systems - Develop standards for **privileged access**, **non-human accounts**, credentials/secrets, certificates, and key rotation - Support **OpenShift** security design (platform access, RBAC, namespaces, secrets, certificates, workload identities) - Document IAM requirements, security architecture, role mappings, design decisions, risks, and exceptions in approved repositories - Maintain traceability between security requirements, designs, configurations, test cases, and defects in **Azure DevOps** - Support security reviews, architecture approvals, risk assessments, and remediation planning - Define and support testing for authentication, authorization, roles, MFA, certificates, and security controls - Assist with segregation-of-duties and access-control validation where required - Troubleshoot IAM/SSO/token/certificate/service-account/access issues during build, testing, cutover, and Hypercare - Develop operational runbooks and transfer knowledge to security, platform, application, and support teams --- **Here’s What You Need** - Strong experience designing enterprise **IAM** and application-security solutions - Experience with **IBM Maximo** / **Maximo Application Suite** security and authorization models - Hands-on Keycloak administration (federation, realms, clients, groups, roles, token configuration) - Experience with **Active Directory, ADFS, Microsoft Entra ID**, **SAML, OIDC, OAuth 2.0, JWT, SSO, MFA** - Understanding of **Red Hat OpenShift** / **Kubernetes** secur
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.