Identity and Access Management Engineer

Identity and Access Management Engineer

The Department of Administration's Office of Technology and Information Services is seeking an Identity and Access Management Engineer to join our team. The Department of Administration's Office of Technology and Information Services (OTIS) is the state’s central provider of IT services to state government agencies. OTIS oversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies.

In this role you will work as a member of the Data Center Infrastructure team to install, configure, maintain, update and troubleshoot servers and server software. You will assist with daily support, configuration and administration of MS Active Directory, Big Fix infrastructure servers, and Dell Quest tools. This role will maintain, configure, update and monitor all systems utilizing approved software, conforming to DTO and DIS standards and policies ensuring all procedures and processes will properly secure data, applications, and communications conforming specifically to DTO and DIS security standards, policies and procedures.

The position is onsite Columbia, SC.

Responsibilities of the Identity and Access Management Engineer:

• Assist with support and administration of MS Active Directory infrastructure to include design, installation, configuration, maintenance, and performance monitoring of underlying server and application software.
• Assist with support and administration of Quest tools, such as Change Auditor, Enterprise Reporter, Active Role Server, Password Manager and administration of IBM Big Fix root/relay servers and application.
• Ensure daily administration procedures and processes conform to and are compliant with OTO standards and policies, and all appropriate statutory/regulatory requirements.
• Provide system administration of solutions to meet DIS 200 requirements, such as ObservelT and Cyber Ark applications and their underlying infrastructure.
• Perform other duties as assigned.

• A bachelor's degree in communications, business administration, computer science, management information science, or a related field. Relevant experience can be substituted for the bachelor's degree on a year-for-year basis.
• Six (6) years of proven hands-on experience with enterprise information technology architecture including, but not limited to, planning, development, implementation and governance of technologies & services for an enterprise class service provider.

Additional Requirements:

• Knowledge of Active Directory and Identity services with emphasis on identity management, privileged Access Management (PAM), and Password management, conditional access policies.
• Knowledge of role-based access control (RBAC), Azure AD, ADFS, configuration management, SSOSaaS integration and Group Policy management.
• Familiarity with security compliance standards such as CISDISA STIGPUB
  1075 preferred.
• Ability to establish positive working relationships with technical staff, customers and others involved in server management.
• CJIS Certification is a requirement of this position.
• Position may require overnight travel.
• Position may require employee to work evenings and weekends.
• Position requires on-call shifts and call back.
• Position required to report to work during emergency situations and hazardous weather events.
• This position may require the employee to work from a remote location beyond the standard 37.5 hours/week and could include working nights, weekends, and holidays.

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring.

Failure to produce an official, certified transcript may result in not being hired or termination.

• Microsoft Certified Systems Engineer (MCSE) and Microsoft Certified Professional (MCP).
• Strong technical experience with identity and or configuration management- HCL Big Fix and Quest/One Identity Software.
• Experience with automation using Powershell Scripting and or Service Now.

The Department of Administration is committed to providing equal employment opportunities to all applicants and does not…