Iam 0105-0115

**HM Note: This hybrid role is three (3) days in office**

The purpose of this procurement is to procure one (1) **Lead Identity and Access Management (IAM) Application Developer **required to perform the role of _Lead Security Application Developer _within a dedicated team for the ONEID SAML, SSO Federation and OIDC and OAuth developments.

**Responsibilities**:

- Lead the development of ONE ID OOBA enhancement to meet technology currency.
- Provide guidance and consultation to the Federation Broker Upgrade to 12C, particularly in integration and testing.
- Analyze and resolve the current Federation Broker and other ONE ID operation issues.
- Support the ONE ID modernization initiative.
- Work closely with ONE ID team to support the ONE ID service.
- Produce maintainable solutions that will enhance the service's quality.
- Diagnose and troubleshoot functional and performance issues, implement corrective fixes, preventive fixes and triage as required.
- Create and maintain technical documentation as required.

**Desired Skills**:
College/University undergraduate degree in Computer Science or Engineering, or related discipline from a recognized institution or equivalent experience

Knowledge and experience in agile methodologies in solution delivery

A team player with a track record for meeting deadlines; strong relationship building, facilitation and influencing skills to successfully partner with internal and external stakeholders

Working knowledge of privacy policies and security principles

Knowledge and understanding of IAM standards

Experience conducting design walkthrough sessions with project teams

Excellent analytical, problem-solving and decision-making skills; verbal and written communication skills; interpersonal and negotiation skills

Experience reviewing, analyzing, and modifying tools to support SAML and OAuth service

Ability to provide post-implementation support and resolve any post-implementation technical issues

Ability to provide user and system documentation as required

Knowledge of leading-edge technologies design criteria, security and recovery procedures, preparation of technical specifications for installation, testing and performance of integrated, multi-services systems; assess performance and capacity of existing system making recommendations for improving performance and develop technical documentation.

Experience planning, migrating, implementing, and sustaining large complex system development projects

Knowledge of JIRA and Confluence.

**Criteria Details**:
Minimum 7 years' experience in developing solution using Security Assertion Markup Language (SAML) for identity authentication and authorization - **30 points**

Minimum of 10 years' experience in delivering end-to-end system solutions - **20 points**

Experience in developing OpenID Connect and OAuth solutions for service access - **20 points**

Knowledge of PKI and security for IAM flows - **20 points**

Total: 100 pints

Deliverables

Deliverables include, but are not limited to:

- Analyze and resolve operation issues of current ONE ID Federation Broker based on Oracle Identity Federation (OIF) 11G.
- Provide guidance in development, integration and testing in Federation Broker upgrade to Oracle Access Manager (OAM) 12C.
- Upgrade Out-of-Band Authentication (OOBA) service to meet current technology currency.
- Provide consultation and support to the ONE ID team on current projects.
- Provide insights to ONE ID modernization.
- Update specifications and related technical documentations

**Must haves**:

- Strong experience and deep knowledge of Security Assertion Markup Language (SAML) and OpenID Connect (OIDC)/OAuth protocols.
- 7 years+ in developing using SAML for identity, authentication, and authorization
- Strong experience in PKI (Public Key Infrastructure) and other technologies to secure SAML and OAuth flows
- Proven experience with end-to-end solution design, system integration, and deployment
- 5 years+ in integrating SSO Federation
- Knowledge and experience with interfacing to IAM services
- Knowledge and experience integrating supporting systems such as databases, firewall, etc.