{"id":3821644,"url":"https://alion.io/job/nasa-cybersecurity-engineering-and-operations-iii","title":"Cybersecurity Engineering and Operations III","company":{"id":12944,"name":"NASA","domain":"nasa.gov","url":"https://alion.io/company/nasa","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":13,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":134056,"max":160160,"currency":"USD","period":"year","gross":null,"usd_annual":160160},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Splunk","optional":false},{"name":"Unix","optional":false},{"name":"Visual Basic","optional":false},{"name":"Windows","optional":false},{"name":"DHCP","optional":true},{"name":"NIST 800-53","optional":true}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T14:13:32Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Job Details\nNew ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers-literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission-your opportunity-is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.\nLocated in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence.\nThe Cybersecurity Services Operations and Identity, Credential, and Access Management (ICAM) Office is seeking to hire an Enterprise Cybersecurity Engineer III.\nThe responsibilities include, but are not limited to the following:\nAssist in the development and design of conceptual and detailed system solutions to meet Identity Management and Directory access requirements for business, flight/mission, and institutional networks.\nAnalyze and create design concepts, architecture diagrams, and functional/technical requirements for Single Sign-On (SSO) solutions, Lightweight Directory Access Protocol (LDAP), Kerberos, and NTLM authentication methods.\nAssist in managing, upgrading, and maintaining JPL’s Active Directory (AD) infrastructure to ensure security, integrity, and availability. This includes:Designing and implementing AD Group Policies (GPOs) in compliance with cybersecurity policies.\nManaging Windows DNS servers for AD zones and WINS servers for NetBIOS records.\nPerforming domain renames and AD migrations for infrastructure reconstruction.\n\nIntegrate NASA’s PIV smart card authentication with Active Directory to comply with Homeland Security Presidential Directive 12 (HSPD-12).\nDesign and implement Windows Certificate Services (PKI) and Active Directory Federation Services (ADFS) to enable Web SSO for SAML-compliant applications.\nProvide technical support for Samba server integration with AD and configure Oracle Access Manager (OAM) WebGate for integration with the JPLIT directory service.\nDevelop and implement PowerShell and Visual Basic scripts for automated AD data management and reporting.\nWork with internal organizations to document requirements and present system concepts. Provide Level 3 technical support to developers and customers for complex Windows directory and LDAP-related issues.\nSupport analysis of system enhancements, maintenance, and upgrades for ICAM functional applications, including interfaces to HR and flight systems. Document and track changes using configuration management systems.\nRequired Qualifications:\nTypically requires a bachelor’s degree in computer science or a similar discipline with a minimum of 6 years of related experience; or a master’s degree in a similar discipline with a minimum of 4 years of related experience; or a PhD in a similar discipline with a minimum of 2 years of related experience.\nExperience in Windows systems administration (Server 2016/2019/2022) and UNIX environments.\nAdvanced knowledge of Active Directory design, functional requirements, and implementation of Identity Management system improvements.\nStrong understanding of LDAP schema, directory trees, and the configuration of LDAP-based authentication for third-party applications.\nSecurity Principles: Knowledge of advanced principles and techniques in securing networked computer systems, including the application of Least Privilege and Tiered Administration.\nLog Aggregation: Direct working experience with log aggregation technologies such as Splunk, Syslog, and Windows Event Manager.\nExperience architecting scalable systems. Skilled in creating data flow diagrams, data dictionaries, and technical requirements documentation.\nExcellent written and verbal communication skills; capable of leading aspects of technical project developments and creating user guides/tutorials.\nPreferred Qualifications:\nFamiliarity with Laboratory and NASA policies (e.g., NIST 800-53, FIPS 201).\nExperience working with Oracle programmers to support Oracle authentication management and interface functionality.\nDeep understanding of DNS, DHCP, and IPAM in a complex, multi-site enterprise environment.\nUnderstanding business processes in high-tech environments to design enhancements that improve user productivity through streamlined authentication.\nJPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more. Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together. For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date.\nFor further benefits information click Benefits and Perks\nThe hiring range displayed below is specifically for those who will work in or reside in the location listed. In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate’s job related skills, experience, knowledge, and relevant education/training.\nThe typical full time equivalent annual hiring range for this job in Pasadena, California.\n$134,056 - $160,160JPL is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, citizenship, ancestry, age, marital status, physical or mental disability, medical condition, genetic information, pregnancy or perceived pregnancy, gender, gender identity, gender expression, sexual orientation, protected military or veteran status or any other characteristic or condition protected by Federal, state or local law.\nIn addition, JPL is a VEVRAA Federal Contractor.\nEEO is the Law.\nEEO is the Law Supplement\nPay Transparency Nondiscrimination Provision\nThe Jet Propulsion Laboratory is a federal facility. Due to rules imposed by NASA, JPL will not accept applications from citizens of designated countries or those born in a designated country unless they are U.S. Citizens, Legal Permanent Residents of the U.S or have other protected status under 8 U.S.C. 1324b(a)(3). The Designated Countries List is available here.","description_format":"text","description_chars":6553,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Brewing & Beer","Secondary Education"],"lifecycle":[{"event":"open","at":"2026-11-05T17:27:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":172500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":25,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":160160,"is_top_pay":true},"html_url":"https://alion.io/job/nasa-cybersecurity-engineering-and-operations-iii","json_url":"https://alion.io/job/nasa-cybersecurity-engineering-and-operations-iii.json","meta":{"generated_at":"2026-11-09T18:24:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2985,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12944},"rest":"https://alion.io/mcp/rest/get_company?id=12944"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasa-cybersecurity-engineering-and-operations-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasa-cybersecurity-engineering-and-operations-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasa-cybersecurity-engineering-and-operations-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasa-cybersecurity-engineering-and-operations-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasa-cybersecurity-engineering-and-operations-iii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3821644}},{"tool":"search_jobs","arguments":{"company":"nasa.gov","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3821644},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}