Security Analyst

Local Candidate Notice

Program will only accept LOCAL ONLY candidates for this position (Within 50-mile radius).

Interviews will be conducted:

• Through Microsoft Teams

Services Overview. The selected Vendor's Candidate will be part of CPA's Fiscal Management Statewide Fiscal Systems team, supporting the Centralized Accounting and Payroll/Personnel System (CAPPS) Program. The CAPPS Program for this engagement comprises the following components: HR/Payroll (inclusive of Recruit functionality), Financials, STARR, and all ancillary systems. The selected Vendor's Candidate must be adaptable and able to learn and integrate new systems and platforms as needed, such as CGI Advantage.

• Performing highly advanced (senior-level) consultative services and technical assistance work related to supporting the CAPPS Program.
• Responsible for the IAM (TDIS) and ERP (CAPPS) security framework, which includes but is not limited to:
  • Provides oversight of IAM workflows, including account lifecycle management, provisioning, de provisioning, and access reviews.
  • Manage and enforce role based access control (RBAC) and least privilege models within ERP and connected systems.
  • Design and maintain segregation of duties (SoD) rules; identify and remediate SoD conflicts across business processes.
  • Review and validate security roles, permission sets, and custom authorizations within CAPPS and all ancillary systems.
  • Monitor and analyze authentication, authorization, and privilege escalation logs for suspicious behavior and coordinate any findings with CPA Information Security Office.
  • Oversee secure integration of third party apps via SAML, OAuth, OIDC, SCIM, and custom APIs.
  • Validate CAPPS application changes, customizations, and workflows for security and compliance impact.
  • Respond to and investigate identity related security incidents, including account compromise, unauthorized access, and TDIS fraud indicators.
  • Maintain standards for security, performance, compliance, and architecture.
• Responsible for ensuring that all digital products and content meet WCAG 2.1 accessibility standards. This includes maintaining perceivable, operable, understandable, and robust experiences for all users, regularly reviewing content for compliance, and implementing updates or remediation whenever accessibility issues are identified.
• Assisting with all applicable contract management oversight responsibilities associated with the CAPPS Program, including, but not limited to:
  • Assisting and participating with the annual IT control audits related to the CAPPS Central applications.
  • Ensuring contract data security, user permissions, audit trails, and compliance with organizational and regulatory standards.
  • Performing technical reviews of contract templates, metadata structures, workflows, and automation rules to ensure accuracy and usability.
  • Working closely with Fiscal Management’s contract managers to identify gaps and optimize contract processes.
• Overseeing and/or assisting with technical oversight and support related to, but not limited to, SLAs, system monitoring, environment analysis, hardware/software evaluation, network troubleshooting, migration paths, coding standards, security standards, compare reports, application change management review, and batch scheduling review.
• Maintaining documentation related to architecture, configuration, integrations, and change management.
• Supporting reporting and analytics for contract KPIs, compliance metrics, and lifecycle performance.
• Reviewing and suggesting approval for all assigned Technical Deliverables related to CAPPS Architecture, CAPPS System Development Lifecycle, Disaster Recovery, CAPPS Security Plans (SSP), and all CAPPS related Technology plans…