Senior/Principal Solutions Architect - Identity & Access Management, Hybrid

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

We are seeking a skilled and motivated Mid-Career Solutions Architect with hands-on experience in SailPoint and EntraID administration, along with practical knowledge of Azure, to join our team. The ideal candidate will have a strong background in administering and optimizing SailPoint applications and EntraID identity solutions. Familiarity with Azure is a plus. This role demands technical expertise, problem-solving ability, and clear communication.

On any given day, you maybe called to:

• Administer and maintain SailPoint applications, ensuring optimal performance and data integrity
• Configure and operate EntraID solutions, including conditional access, multi-factor authentication, entitlement management, and B2B/B2C scenarios
• Support integrations with Azure cloud services as needed for authentication, governance, and monitoring
• Collaborate with cross-functional teams to support business objectives and enhance service delivery
• Provide technical support and training to end-users as required

*The selected applicant can work a combination of onsite and offsite work. The selected applicant must live within a reasonable distance for commuting to the assigned work location when necessary.

$117,500 - $235,700

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Bachelor's degree in computer science, Information Technology, or related field, or equivalent education/experience; Plus, an additional five (5) years of relevant experience and/or education equivalent
• Hands-on experience with SailPoint administration, EntraID identity management
• Familiarity with Windows operating systems and Active Directory
• Ability to obtain and maintain a DOE Q security clearance

• Experience running Apache on Windows Server and supporting Java-based SailPoint integrations
• Strong understanding of IT security principles and best practices
• Excellent problem-solving skills and composure under pressure
• Effective verbal and written communication skills
• Practical experience or certification in Azure cloud services (e.g., Microsoft Certified: Azure Administrator Associate)
• Experience with scripting languages (PowerShell, Python) for automation
• Familiarity with Agile methodologies and project management practices
• Knowledge of database management and SQL
• Previous customer-facing or sales support experience

The mission of 9777, Identity & Access Management, is to provide services that are resilient, secure, standardized, and simple. We provide secure authentication and authorization to access data and application workloads currently on premises and as they migrate to the cloud, Windows configuration management for hosting such workloads, and proxy services. Our services are downstream for the majority of applications at Sandia and are critical for supporting Sandia's mission.

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.