Senior HPC Identity & Access Management Software Engineer (Software Engineer Level 3 – SWE3) Wyetech is seeking an experienced Senior Software Engineer (SWE3) to design, develop, implement, and maintain identity and access management (IAM) solutions that secure critical High-Performance Computing (HPC) resources within Linux-based environments. This position focuses on implementing robust authentication, authorization, and permissions management mechanisms, including Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), identity federation, Single Sign-On (SSO), and secrets management. The Software Engineer will help ensure that HPC systems comply with Agency security policies and applicable industry standards while maintaining secure, reliable, and efficient access to mission-critical computing resources. The ideal candidate will possess strong Python development experience, advanced Linux security administration expertise, and hands-on experience with Keycloak, HashiCorp Vault, Ansible, and modern identity federation protocols.
Required Skills/Experience:
- Active TS/SCI clearance with Full Scope Polygraph.
- Experience using the Linux command-line interface (CLI) and associated system administration and security tools.
- Proficiency in Bash scripting to automate administrative tasks, security configurations, and operational workflows.
- Experience developing software applications and solutions using Python.
- Experience designing and implementing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) solutions for HPC environments.
- Advanced Linux security administration experience, including Pluggable Authentication Modules (PAM), Security-Enhanced Linux (SELinux), file permissions, Access Control Lists (ACLs), and audit logging.
- Experience developing and integrating Identity and Access Management (IAM) solutions using Keycloak.
- Experience implementing identity federation and Single Sign-On (SSO) solutions using SAML, OpenID Connect (OIDC), and OAuth 2.0.
- Experience developing, configuring, and maintaining secrets management integrations using HashiCorp Vault.
- Experience developing Ansible playbooks to automate the provisioning, configuration, and management of HPC hardware and software components.
- Experience with containerization technologies, including Docker, Podman, and containerd.
- Experience with CI/CD principles, methodologies, and tools, including GitLab CI.
- Experience using Git for source code management, version control, branching strategies, and team collaboration.
Desired Skills:
- Experience using Atlassian collaboration and development tools, including Jira and Confluence.
- Familiarity with Agile, Scrum, or Scaled Agile Framework (SAFe) software development methodologies.
The Software Engineer designs, develops, tests, deploys, documents, maintains, and enhances complex software systems based on documented requirements. These systems may include identity management services, access control applications, data repositories, security automation platforms, and distributed software components supporting large-scale HPC infrastructure. The Level 3 Software Engineer provides advanced technical expertise, software architecture guidance, development leadership, and quality assurance oversight while supporting the integration, sustainment, and modernization of mission-critical applications.
Responsibilities and Capabilities:
- Design, develop, implement, and maintain identity and access management solutions that secure critical HPC system resources.
- Develop and enhance software applications, services, and security integrations using Python and supporting technologies.
- Design and implement RBAC and ABAC mechanisms to enforce access policies and protect sensitive computing resources.
- Configure and maintain advanced Linux security controls, including PAM, SELinux, file permissions, ACLs, and audit logging.
- Develop, integrate, and sustain IAM solutions using Keycloak to support centralized identity management and access control.
- Implement and maintain identity federation and Single Sign-On solutions using SAML, OIDC, and OAuth 2.0.
- Develop and sustain secure secrets management integrations using HashiCorp Vault.
- Create and maintain Bash scripts to automate security configurations, administrative functions, and operational processes.
- Develop Ansible playbooks to automate provisioning, deployment, configuration, and management of HPC hardware and software infrastructure.
- Integrate security services and access management components into Linux-based HPC environments and containerized applications.
- Develop, deploy, and maintain containerized software services using Docker, Podman, and containerd.
- Configure and support CI/CD pipelines using GitLab CI to facilitate automated software integration, testing, and deployment.
- Analyze user and system security requirements to derive software design specifications, functional requirements, and performance standards.
- Debug existing applications, resolve security-related software defects, and implement enhancements to improve system functionality, reliability, and performance.
- Develop and execute software testing procedures to validate authentication, authorization, access control enforcement, and compliance with design requirements.
- Collaborate with software developers, systems administrators, cybersecurity personnel, and mission stakeholders to identify requirements and resolve technical challenges.
- Provide technical leadership and guidance to software development teams, including oversight of development activities, code quality, testing, and adherence to engineering standards.
- Evaluate security architectures, recommend improvements, and identify opportunities to enhance scalability, maintainability, and operational efficiency.
- Maintain comprehensive technical documentation covering identity management configurations, access control mechanisms, system integrations, and operational procedures.
- Support software deployment, configuration management, system sustainment, and continuous improvement initiatives.
Qualifications:
Candidates must meet one (1) of the following education and experience combinations:
- Master's degree in Computer Science or a related discipline from an accredited college or university, plus five (5) years of Software Engineering experience.
OR
- Bachelor's degree in Computer Science or a related discipline from an accredited college or university, plus seven (7) years of Software Engineering experience.
OR
- Nine (9) years of Software Engineering experience.
All qualifying experience must be in programs and contracts of similar scope, type, and complexity.
Security Clearance and Additional Requirements:
- Required Clearance: Active TS/SCI with Full Scope Polygraph.
- U.S. Citizenship required.
At Wyetech, you’ll be at the center of an award-winning corporate culture, breaking technological barriers and solving real-world problems for our federal government customers. We are committed to hiring the best of the best, and in return, we offer a world-class, truly unique employee experience that is rare within our industry. Wyetech believes in generously supporting employees as they prepare for retirement. The company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no requirement for employee matching. All contributions are fully vested from day one, ensuring immediate ownership of retirement funds.
Additional benefits include:
Wyetech provides a generous PTO plan of up to 200 hours annually, aligned with applicable state leave regulations. Employees have the flexibility to adjust their PTO allocation at the start of each calendar year, ensuring it meets their evolving needs. Full-time employees have the option to participate in a variety of voluntary benefit plans including:
- A Choice of Medical Plan Options, some with Health Savings Account (HSA)
- Vision and Dental
- Life and AD&D Benefits
- Short and Long-Term Disability
- Hospital Indemnity, Accident, and Critical Illness Insurances
- Optional Identity Theft and Legal Protection Services
- Employee Referral Bonus Eligibility up to $10,000
- Mobility Among Wyetech-supported Contracts
- Various contract and work locations throughout Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii and OCONUS
- Various team-building events throughout the year, such as monthly lunches, summer company picnic, and an annual holiday party.
- Employees receive two complimentary branded clothing orders annually.
Hourly Pay Range: $98.47–$133.35 Hourly pay rates listed for this position serve as a general guideline and are not a guarantee of compensation. Compensation will vary dependent upon factors including but not limited to: Government contract rates; education; relevant prior work experience, knowledge, skills, and competencies; certifications; and geographic location. Hourly pay rates reflect the pre-benefit gross wage amounts. Wyetech, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Affirmative Action Statement:
Wyetech, LLC is committed to the principles of affirmative action in all hiring and employment for minorities, women, individuals with disabilities, and protected veterans.
Accommodations:
Wyetech, LLC is committed to providing an inclusive and accessible hiring process. If you need any accommodations during the application or interview process, please contact Brittney Wood. at 844-WYETECH x727 or staffing@wyetech.com. We are happy to provide reasonable accommodations to ensure equal access to all candidates.
Wyetech Terms and Conditions:
- Wyetech may reach out to you via SMS messages during the course of your Wyetech candidacy.
- You can cancel the SMS service at any time. Just text "STOP" to the short code. After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again.
- If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at IT@wyetech.com, 844-WYETECH (844-993-8324).
- Carriers are not liable for delayed or undelivered messages
- As always, message and data rates may apply for any messages sent to you from us and to us from you. If you have any questions about your text plan or data plan, it is best to contact your wireless provider.
- If you have any questions regarding privacy, please read our privacy policy below.
Privacy Policy:
We collect your mobile number and related opt-in data for the delivery of SMS messages. Your mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes.