Enterprise Products Partners L.P. is one of the largest publicly traded partnerships and a leading North American provider of midstream energy services to producers and consumers of natural gas, NGLs, crude oil, refined products and petrochemicals. Our services include natural gas gathering, treating, processing, transportation and storage; NGL transportation, fractionation, storage and import and export terminals; crude oil gathering, transportation, storage and terminals; petrochemical and refined products transportation, storage and terminals; and a marine transportation business that operates primarily on the United States inland and Intracoastal Waterway systems. The partnership’s assets include approximately 50,000 miles of pipelines; 260 million barrels of storage capacity for NGLs, crude oil, refined products and petrochemicals; and 14 billion cubic feet of natural gas storage capacity.

The Authentication Security Engineer will play a key role in the Cybersecurity Engineering team in managing risks to the information assets and systems of the organization by implementing and supporting the enterprise-wide authentication architecture. The responsibilities will include implementing, maintaining, and supporting the technology platforms that provide multi-factor authentication, single sign-on, federation, and access authorization. Responsibilities include, but are not limited to:

• Work with various application teams to design, install, implement, architect, configure, and maintain one or more authentication and access management platforms for both on-premise and cloud environments
• Implement single sign-on and multifactor authentication integrations using SAML, OpenID Connect (OIDC) / OAuth 2.0, WS-FED, etc.
• Prepare test cases and regression test plans, as well as perform unit and peer testing
• Create documentation of the process, guidelines, standards, and technical specifications, as well as draw network and system architecture diagrams
• Perform daily ad hoc support with strong analytical skills for troubleshooting and be available for after-hours emergency support
• Perform system and application patching during monthly after-hour maintenance windows

The successful candidate will meet the following qualifications:

• Bachelor’s degree in Computer Science (CS), Management Information Systems (MIS), or Computer Information Systems (CIS) or significant relevant experience preferred.
• 3+ years of IT professional experience working in cybersecurity, infrastructure, or network architecture organization with an emphasis on authentication and access management technology
• Experience working with SecureAuth, Oracle Access Manager (OAM), ForgeRock, Okta, Auth0, etc.
• Experience with authentication protocols (SAML, OIDC / OAuth 2.0, WS-FED)
• Experience working in Linux environments
• Experience in LDAP entries, schema, replication, best practices, and other critical aspects of LDAP is required (AD, OID, etc.)
• Experience with PowerShell and scripting experience is preferred
• Excellent verbal and written communication skills
• Security certifications (CISSP, CIAM, SecureAuth Administrator, etc.) are preferred
• Active member of one or more security associations (ISSA, ISACA, InfraGard, etc.) is preferred