Identity & Access Security Lead; OIM​/OIG

Overview

GENERAL DUTIES This position encompasses professional and responsible technical consultative and/or administrative work. Under administrative direction of a university IT manager, with broad latitude of independent action or decision, serves as subject matter expert on IT security, identity, and access infrastructure; provides IT security architectural guidance; designs security solutions; conducts IT risk assessments and recommended mitigating solutions.

There are three (3) Assignment Levels within this classification. All personnel perform related work. Assignment Levels 2 and 3 may supervise staff. This specification describes typical assignments; related duties may be assigned as needed.

• Oversees the architecture and operations of both Production and Non-Production OIM environments, ensuring their optimal performance through rigorous building, testing, and maintenance of interconnected systems.
• Develops and supports OIM system configurations, resource provisioning, role management, and intricate policy creation to align with organizational security and operational needs.
• Directs resolution of high-stakes OIM-related application issues, often under time-sensitive conditions during off-hours, to mitigate operational disruptions and maintain system continuity.
• Leads complex integrations and project rollouts by leading collaborations across IMS, database administrators, security teams, network engineers, and People Soft developers.
• Communicates with key stakeholders to manage and ensure seamless OIM integration with People Soft and other custom applications critical to university-wide operations.
• Administers in-depth technical reviews and implements procedural changes to enhance the scalability, security, and reliability of the University’s Enterprise OIM system architecture.
• Liaises with CUNY's Information Security Office to investigate and resolve intricate managed identity security incidents, safeguarding sensitive university assets.
• Provides high-level strategic recommendations to rationalize IT services by analyzing and executing decisions to combine, decommission, or expand servers, services, and applications, ensuring cost-effectiveness and scalability.
• Oversees diverse duties within the scope and intention of the role, requiring adaptability, meticulous planning, and the flexibility to work evenings or weekends for critical systems-related tasks.

• A baccalaureate degree in computer science, engineering or a related field from an accredited college or university and five (5) years of satisfactory full-time experience providing IT security architectural guidance, designing security solutions, and/or conducting IT risk assessments and recommended mitigating solutions; or
• A baccalaureate degree from an accredited college or university and six (6) years of satisfactory full-time experience as described in “1” above; or
• A high school diploma or its educational equivalent and ten (10) years of satisfactory full-time experience as described in “1” above; or
• Education and/or experience which is equivalent to "1," "2" or "3" above. The following may substitute for some of the required experience required in "1," "2" or "3" above, as follows:
  College Education (undergraduate Credits) May Substitute For Up To Four (4) Years Of The Required Experience In "3" Above On The Following Basis: 30 to 59.9 semester credits substitute for 1 year of experience; or 60 to 89.9 semester credits substitute for 2 years of experience; or 90 to 119.9 semester credits substitute for 3 years of experience; or 120 or more semester credits substitute for 4 years of experience.
  
  Graduate Credits In Information Technology, Computer Science Or a Related Field May Substitute For Up To Two (2) Years Of Experience In "1" Or "2" Above On The Following Basis: 15 to 29.9 graduate credits substitute for 1 year of required experience; or 30 or more graduate credits substitute for 2 years of required experience. Each Of The Following Certifications May Substitute For One (1) Year Of The Required Experience In "1," "2" Or "3" Above: CISSP;
  
  CEH;
  Security+; CISM; CISA; GSEC;…