Vacancy expired!
Job DescriptionProvide direct oversight of Identity and Access Management (IAM) services. This position is responsible for leading the way in implementing and optimizing Identity, Credential, and Access Management (ICAM) technologies in support of the executive branch agencies business needs. With identity and authentication cutting across all towers in the Enterprise an understanding of the capabilities and integration points are required. The IAM Specialist will possess in-depth identity management subject matter expertise in order to be able to provide both technical and project leadership. This role works in concert with the Multisource Service Integrator (MSI) as well as other suppliers and customers to ensure all IAM processes meet and/or exceed industry best practices. The ideal candidate will be expected to become well-versed in all IT security roles and responsibilities included in the Commonwealth’s Information Security Program. In addition to providing technical leadership, the IAM Lead will also serve as a thought leader, helping to identify new opportunities and drive continued growth across the identity management service space and supports all aspects of identity management, including the identity roadmap, standards, operations, and work with our partners on product level implementations and migrations. Overall, this role will provide leadership and technical direction to support the planning, development, organization, and delivery of the commonwealth’s IAM solutions and services to executive branch agencies. Minimum Qualifications· 4+ years of experience with identity management solutions including but not limited to LDAP, OKTA, MIM, SailPoint, Cyberark, IdentityIQ (IIQ) including Life Cycle Manager (LCM) and Compliance Manager (CM). Including demonstrated expertise in the following specific SailPoint features:- Directory/Meta-directory services
- Single Sign-On, Web Access Management
- Federated Authentication/SAML
- User Lifecycle Management/Provisioning
- Role Based Access Control
- Password Management
- Web Services integration
- SCIM
- Public Key Infrastructure (PKI)
- Integration with PAM solutions (i.e., CyberArk)
- Migration from Legacy and COTS products
- 6+ years of experience in one or more of the following identity governance areas: User Provisioning, Access Certifications, Access Request, Workflow, Delegated Administration, and Password Self-Service
- A verifiable proficiency in Directory Services, Privileged Account Management, and Multi-factor authentication tools
- Awareness and understanding of Virtual Private Networking (VPN), Zero Trust Concepts, and Policy Based Secure Access
- Demonstrated ability to work with all levels of management, customers, and vendors to resolve IAM service challenges
- Proven ability to manage projects using best practice methodologies
- Demonstrated experience of interfacing with stakeholders, team members, and executives via verbal and written communications to present complex, technical information to both technical and non-technical audiences
- Proficient at pulling multiple parties together to solution a request/project or to solve an operational issue
Preferred Qualifications· Working knowledge of Microsoft Digital Identity capabilities as well as other leading market vendor solutions (e.g. Saviynt, One Identity, ForgeRock, etc.)- Experience leading the architecture, design, build, development, and integration of an enterprise-wide identity management solution
- Strong understanding of policy standards such as NIST 800-53 and what it means to be Fedramp compliant.
- Experience working in an outsourced or supplier managed environment
· Knowledge of Service Level Agreements (SLA) and experience managing to them· Preferred Certifications:o CyberArko CISSPo Security+o AWSo Azureo SailPoint· Hands-on experience implementing in a cloud environment, such as AWS, Azure, Google Cloud Platform or Oracle
- ID: #49384495
-
State: Virginia
Richmond
23219
Richmond
USA
- City: Richmond
- Salary: $70+
- Job type: Contract
- Showed: 2023-03-01
- Deadline: 2023-04-10
- Category: Et cetera