ABAC Engineer/Developer - CGI - Fairfax

Job description

Job Description

ABAC Engineer/Developer

Position Description
CGI Federal is seeking an experienced developer to join the Team for developing quality software product using Attribute Based Access Control (ABAC) as the security framework for data access. Unlike the traditional Role Based Access Control (RBAC), ABAC defines a data access control paradigm whereby access rights are granted to users through the use of policies that combine attributes together. The policies can use any type of attributes (user attributes, resource attributes, object, environment attributes etc.). As the ABAC Engineer, you will work closely with the Solutions Architect and other developers to research available ABAC products to determine the best choice for the project. You will analyze the project requirements and gap analysis to determine and recommend build vs buy option ensuring alignment with the product architecture and overall design guidelines. You will develop a detailed knowledge of the underlying mechanism of ABAC policy framework related to data and data products and become the subject matter expert. The ideal candidate should have solid understanding of the federal data market, customer adoption of digital data, deep expertise with data access technologies and a desire to drive change through data alignment across the enterprise and promote sharing, reuse, ROI to reduce overall cost and improve information flow. The role requires the candidate to be a hands-on full stack developer with experience in all phases of the SDLC.

Your future duties and responsibilities
As a key member of CGI Federal’s Team, you shall be responsible for the following:

1. Develops overall ABAC architecture and design decisions for variety of data sources, data formats, data storage that span across multiple security domains.
2. Working with other team members and the Technical Lead to convey solution strategy as it pertains to information and ABAC solution (build vs buy, tools, policy management) by conducting collaborative workshops, consulting, reporting, and creating pertinent deliverables.
3. Performs a key management and thought leadership role in the areas of advanced data security techniques, including metadata, data access, data integration, data discovery, solution design and implementation.
4. Develops and helps institute best practices, methodologies and standards about Data Governance, Policy Management, Data Catalog, and Data Security.
5. Works with Solution Architects, domain experts, and other project team members to develop consensual software design to ensure the proposed solution meets both client and end user needs.
6. Steward of Enterprise Policy Management including data quality and data security technologies.
7. Defines and achieves the overall data access policies for the enterprise; including data modeling, implementation and data management for our enterprise data warehouse and advanced data analytics systems.

Required qualifications to be successful in this role

1. Due to the nature of this government contract, US Citizenship and the ability to obtain a TS/SCI is required.
2. Good understanding of application Authentication and Authorization framework.
3. In depth knowledge of RBAC (Role Based Access Control) implementation using custom code or Enterprise Identity Access Management (IAM) products.
4. Hands-on experience implementing ABAC policy frameworks.
5. Intimate familiarity with existing ABAC frameworks such as Axiomatics, NextLabs, Casbin, etc.
6. Hands-on experience with metadata management activities.
7. Excellent coding skills in any of these programming languages: NodeJS, Java, React, Go.
8. Hands on experience with data profiling tools and processes.
9. Well versed in the following data domains: Master Data, Operational Data, Analytical Data, Unstructured Data, and Metadata.
10. Familiarity with Data Catalog and/or Data Virtualization tools such Alation, CKAN, Collibra, Immuta, Denodo, etc.
11. Familiarity with Single-Sign-On and different type of Authentication mechanisms SAML 2, oAuth, OpenID 2, AD, PKI, SSL Certificate, etc.
12. Familiarity with government security standards such as NIST, FIPS-2, HSPD-12 and OMB.
13. Working knowledge of all phases of the Software Development Life Cycle (SDLC).
14. 5+ years of hands-on development experience.
15. Understanding of cross-domain data access needs in federal and government industry.

Build your career with us.

It is an extraordinary time to be in business. As digital transformation continues to accelerate, CGI is at the center of this change—supporting our clients’ digital journeys and offering our professionals exciting career opportunities.

At CGI, our success comes from the talent and commitment of our professionals. As one team, we share the challenges and rewards that come from growing our company, which reinforces our culture of ownership. All of our professionals benefit from the value we collectively create.

Be part of building one of the largest independent technology and business services firms in the world.

Learn more about CGI at