Engineer, Identity Management

Owns and optimizes the processes for user account creation and user access permission assignment and revocation. Collaborates with cross-functional teams to enhance the organization's automated user creation and permission assignment to all key systems.

Performs other duties as assigned.

• Manage identity and access systems across Active Directory, Google Workspace, Azure, Student Information System, and Oracle Cloud ERP platforms.
• Develop, implement, and maintain identity and access management solutions and systems.
• Troubleshoot, identify, and resolve technical identity and access management related issues.
• Improve identity and access management solutions and systems for protection against evolving threats and efficiency.
• Assess and report on risks related to Active Directory and Privileged Access Management (PAM), ensuring compliance with regulatory requirements.
• Administer user accounts, manage Microsoft licensing, and coordinate account lifecycle processes including creation, modification, and offboarding.
• Leverage Power Automate, Power BI, and Business Objects for data analysis, reporting, and process automation.
• Perform other duties as assigned.

Experience, Education and Training:

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.

• Three years of experience in systems administration to include Identity and Access Management (IAM).
• Three years of experience with Microsoft Graph, Power Shell scripting, Microsoft Servers and Active Directory environments.
• Three years of experience with SQL and database integration.

Preferred Qualifications:

• Experience with Oracle Cloud ERP account management and Oracle/AD integration.
• Experience with Business Objects report development.
• Familiarity with Zero Trust and Cloud Identity federation models.

Supervisory or team lead experience preferred.

Note:

Other combinations of applicable education, training, and experience that provide the knowledge, skills, and abilities necessary to perform effectively in the position may be considered.

Licenses and Certificates:

One or more of the following certifications are preferred:

• Microsoft Certified:
  Azure Security Engineer Associate
• CompTIA Security+

Oracle certifications related to ERP SAAS solutions preferred.

Possession of a valid driver's license equivalent to a non-commercial class C Maryland driver's license is required.

Knowledge, Skills, and Abilities:

• Skill in scripting and programming languages such as Python, Power Shell, SQL, and VBA, with knowledge of C++ desirable.
• Skill in analysis and problem-solving, particularly in IAM and user lifecycle management.
• Knowledge of Single Sign-On (SSO) and federation solutions, including Azure AD, Azure B2C, Microsoft Graph, and Google Workspace.
• Ability to automate and optimize processes using tools like Power Automate and Power BI.
• Strong organizational, collaboration, and communication skills, with the ability to work in agile or iterative environments.
• Ability to interface effectively with HR, Finance, and IT teams for security and user management needs.

PHYSICAL AND

ENVIRONMENTAL CONDITIONS:

The work of this class is generally sedentary and performed in an office environment. Duties require travel to schools and facilities throughout Baltimore County and other areas. May involve the lifting and carrying of heavy network infrastructure equipment. May be required to use their own vehicle to respond to remote sites for troubleshooting.

CONDITIONS OF EMPLOYMENT:

Employees in this classification are Essential-As-Neededpersonnelwhich states that employees are required to work when schools and/or offices are closed during adverse weather conditions or any other emergency when contacted and directed to do so.

Persons appointed to this class will participate in a rotational 24/7 on-call and may be required to work beyond their normally scheduled hours with little or no advanced notice. Work includes evenings and weekends as required.

FLSA: Exempt

RETIREMENT: Eligible for the Baltimore County Employees' Retirement System.

GRADE: OPE Grade 09

SALARY:$102,348 - $164,624

Visit the BCPS Office of Payroll website for additional information on…