Security – IAM Architect

Accenture Federal Services

. Define, validate, and guide implementation of security and identity architecture for the upgrade from Maximo 7.6.1.3 to MAS 9.2 on Red Hat OpenShift .

Posted 11/12/2026full-timeRemote • United StatesMid-LevelSenior💰 $109,500 - $194,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing identity and access management solutions, particularly with Keycloak and IBM Maximo. Proficient in security architecture, role-based access controls, and compliance within regulated environments.

Highest-signal resume keywords

Identity And Access Management (IAM)Keycloak AdministrationIBM Maximo SecurityRed Hat OpenShift SecuritySAML, OIDC, OAuth 2.0

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture DesignFederated Identity ManagementRole-Based Access Control (RBAC)Token-Based AuthenticationPrivileged Access ManagementTroubleshooting IAM IssuesOperational Runbook DevelopmentSecurity Control TestingAzure DevOpsAutomated Security Scanning

Soft Skills

Analytical SkillsDocumentation SkillsStakeholder ManagementCoordination Skills

Tools & Technologies

KeycloakActive DirectoryMicrosoft Entra IDSiteMinderAzure DevOps

Certifications & Qualifications

Public Trust Clearance

Industry Keywords

SOX ComplianceNuclear OperationsRegulated EnvironmentsSegregation Of DutiesAccess Governance

Tech Stack

Tools & technologies

AzureCyber SecurityKubernetesOpenShift

About the role

Key responsibilities & impact

Define, validate, and guide implementation of security and identity architecture for the upgrade from Maximo 7.6.1.3 to MAS 9.2 on Red Hat OpenShift
Lead transition from SiteMinder to Keycloak federated with Active Directory, ADFS, or Microsoft Entra ID
Support implementation of SSO, MFA, role-based access, service accounts, certificates, and security controls across Sandbox, Development, Acceptance, and Production environments
Assess current Maximo authentication, authorization, SiteMinder, directory, security-group, service-account, and certificate configurations
Define future-state MAS 9.2 identity and access-management architecture
Design and guide Keycloak federation configuration
Implement and validate SAML, OIDC, OAuth 2.0, SSO, MFA, and token-based authentication patterns
Map users, directory groups, job roles, and business responsibilities to MAS security groups and application permissions
Establish role-based and least-privilege access for users, administrators, developers, support teams, and service accounts
Define authentication and authorization patterns for integrations, APIs, middleware, mobile applications, and boundary systems
Develop standards for privileged access, non-human accounts, credentials, secrets, certificates, and key rotation
Support OpenShift security design, including platform access, RBAC, namespaces, secrets, certificates, and workload identities
Document IAM requirements, security architecture, role mappings, design decisions, risks, and exceptions
Maintain traceability between security requirements, designs, configurations, test cases, and defects in Azure DevOps
Support security reviews, architecture approvals, risk assessments, and remediation planning
Define and support authentication, authorization, role, MFA, certificate, and security-control testing
Assist with segregation-of-duties and access-control validation
Troubleshoot IAM, SSO, token, certificate, service-account, and access issues during build, testing, cutover, and Hypercare
Develop operational runbooks and transfer knowledge to security, platform, application, and support teams
Coordinate with Cybersecurity, Enterprise Architecture, infrastructure, OpenShift, Maximo, integration, testing, and business teams to meet security, SOX, and nuclear requirements

Requirements

What you’ll need

Strong experience designing enterprise IAM and application-security solutions
Experience with IBM Maximo or Maximo Application Suite security and authorization models
Hands-on knowledge of Keycloak administration, federation, realms, clients, groups, roles, and token configuration
Experience with Active Directory, ADFS, Microsoft Entra ID, SAML, OIDC, OAuth 2.0, JWT, SSO, and MFA
Understanding of Red Hat OpenShift or Kubernetes security, RBAC, secrets, certificates, and service accounts
Experience designing user, administrator, system, integration, and non-human identity controls
Knowledge of least-privilege access, privileged-access management, segregation of duties, and access-governance principles
Experience developing security architecture documents, role matrices, authentication flows, and operational procedures
Strong troubleshooting, analytical, documentation, and stakeholder-management skills
Ability to coordinate across cybersecurity, infrastructure, application, integration, testing, and business teams
Experience upgrading Maximo 7.6.x to MAS 9.x
Experience migrating an application from SiteMinder to Keycloak or another modern identity broker
Familiarity with MAS running on Red Hat OpenShift in an on-premises enterprise environment
Knowledge of Azure DevOps, CI/CD, DevSecOps, automated security scanning, and controlled environment promotion
Experience supporting utilities, nuclear operations, SOX-controlled systems, NQA-1 environments, or other highly regulated organizations
Public Trust clearance level
Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States

Benefits

Comp & perks

Collaborative and caring community
Hands-on experience
Certifications
Industry training
Wide variety of benefits
Reasonable accommodations for disabilities or religious observances