Job Description
Job Description
Project Overview :
We are seeking a Senior Identity & Access Management (IAM) Engineer / Identity Broker Architect to lead the design and implementation of the Logbook Identity Management Broker for OpenID (LIMBO) for NOAA. LIMBO will serve as a mission-critical identity broker enabling secure authentication for NOAA employees (via ICAM) and public users (via Login.gov), while preserving authorization and permit data stored in multiple legacy systems.
This role is ideal for an engineer who has deep hands-on experience with both OIDC and SAML 2.0 , has built authentication platforms at scale, and can successfully operate in a federal environment with CAC / PIV, MFA, and NIST-aligned requirements.
You will drive architecture, system build, integrations, security compliance, automated testing, and support for multiple mobile applications used across the U.S. fishing industry.
Key Responsibilities
Identity Broker Development
- Design and build the LIMBO identity broker that supports :
OIDC Authorization Code Flow with PKCE (S256)
JWT access tokens signed with RS256Standard OIDC endpoints : / authorize, / token, / userinfo, / jwks, / .well-known / openid-configurationImplement SAML 2.0 Service Provider capabilities including :Signed assertions and responses
HTTP Redirect & POST bindingsMetadata import / exportConfigurable SAML attribute → OIDC claim mappingFederal Identity Provider Integrations
Integrate with NOAA ICAM to enable CAC / PIV authentication for NOAA staff.Integrate with NOAA’s Login.gov federation broker for public user authentication.Legacy System Integrations
Build secure APIs and UI flows to link Login.gov identities with existing legacy systems :PIMS (Appian) via validation-code workflow
GARFO Certify (REST API)Store and maintain user-to-permit associations in a relational data model.Implement permit-access revocation workflows for ownership changes.Architecture, Testing & Deployment
Design relational database schema to preserve identity & authorization data.Implement automated unit, integration, and load tests for all login flows.Deliver containerized application builds that meet NMFS OCIO standards.Provide documentation, technical training, and post-deployment support.Collaborate closely with ECL development teams and NOAA operations staff.Required Qualifications
Identity & Authentication
5–8+ years backend engineering experience, including 3+ years in IAM.Expert-level knowledge of :OpenID Connect (OIDC)
OAuth 2.0 / 2.1SAML 2.0 federationPKCE, JWT / JWS / JWKS, RS256 signingExperience building or customizing :Identity brokers
Authorization serversSAML SP integrationsBackend Engineering
Experience with at least one modern backend stack :
Java (Spring Boot)or
Node.js (NestJS or Express)Additional backend requirements :
REST API design and secure credential handling.Relational databases (PostgreSQL / MySQL)—schema design, migrations.Docker containerization and CI / CD pipelines.Automated testing frameworks (JUnit, Jest, Mocha, Postman / Newman, etc.).Security & Compliance
Experience in federal or regulated environments.Understanding of CAC / PIV, MFA, FedRAMP / NIST 800-63 guidelines.Preferred Qualifications
Prior integration experience with ICAM, Login.gov, Azure AD, or similar.Experience supporting mobile / PWA apps using OIDC login.Familiarity with Appian-based systems (e.g., PIMS).Experience with large-scale identity consolidation or migration projects.Soft Skills
Strong ability to document technical work for federal stakeholders.Excellent communication and collaboration skills.Ability to lead architecture discussions and mentor junior engineers.Comfortable working independently with distributed teams.What We Provide
Opportunity to build a mission-critical authentication platform that supports NOAA’s regulatory programs and the U.S. fishing industry.Work on modern identity standards and federal-grade security architecture.Collaborative environment with NOAA, NMFS, and ECL development teams.Long-term engagement potential on future modernization efforts.Benefits : Competitive benefits package including health, dental, vision, life insurance coverage, 401(k) plan, training programs, accrued paid time off (PTO), performance based monthly & quarterly awards, paid holidays and customer kudo rewards.
Equal Opportunity Employer / Veterans / Disabled