Identity and Access Management Engineer

Identity and Access Management Engineer

Location: Sacramento, CA 95817

Pay Range: $ – $

Classification: Enterprise Technology Infrastructure Specialist Journey

• Plan, design, develop, implement and maintain network infrastructure, including backup and recovery, physical and logical design, network topology, architecture, security architecture, and corporate server complex architecture; assist in defining corporate level projects, developing technical standards, system design, user acceptance tests, and post‑implementation reviews.
• Analyze needs for new hardware and software systems, upgrades and modifications; evaluate current systems, conduct feasibility studies, define requirements, prepare procurement documents and design modifications; implement new software and modifications.
• Provide technical expertise and leadership on network systems, troubleshoot complex networking problems, and offer 24‑hour on‑call support to departments.
• Plan, review and conduct work activities for project information in accordance with established objectives and schedules to support department projects.
• Perform related duties as required.

• High School diploma or equivalent.

• Three or more (3+) years of progressively responsible experience in planning, design, development, testing, implementation and maintenance in a network‑based computing environment, including multi‑vendor, multi‑protocol networks.

• Certificates in information technology or a related field from educational institutions or vendor‑certified programs.

• BA/BS degree in Computer Science, MIS, Business Administration, or related field.

• Five or more (5+) years of relevant experience.
• Ability to analyze user access requirements and assess IAM risks.
• Knowledge of IAM technologies, authentication protocols (Kerberos, LDAP, RADIUS, TACACS), and federation standards (SAML, OAuth, OpenID Connect).
• Experience with directory services, PKI, certificate management, cloud identity providers, and privileged access management.
• Skill in configuring, administering, and troubleshooting directory services and IAM solutions.
• Experience with role‑based and attribute‑based access models.

Applicants must be able to perform the essential job functions with or without a reasonable accommodation.

SMUD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. SMUD complies with applicable state and local laws governing non‑discrimination in employment in every location in which the company has facilities.

This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

SMUD expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of SMUD employees to perform their expected job duties is absolutely not tolerated.