Engineer, Identity Management

Baltimore County Public Schools; Middle River (MD); On-site; USD 102,348 - 164,624; Full time

Job summary

Baltimore County Public Schools is seeking an IAM-focused professional to own and optimize user account creation and access permissions across key systems. You will collaborate with cross-functional teams to enhance automated user provisioning and lifecycle management, while addressing security threats and regulatory requirements.

The role requires strong scripting (PowerShell, SQL) and experience with AD, Microsoft Graph, and cloud identity models, with a focus on efficient, auditable processes

Qualifications

• 3+ years experience in IAM and systems administration.
• Experience with Microsoft Graph, PowerShell, AD environments.
• 3+ years of SQL and database integration.
• Preferred: Oracle Cloud ERP account management and Business Objects.
• Familiarity with Zero Trust and Cloud Identity federation models.
• Supervisory or team lead experience preferred.

Responsibilities

• Manage identity and access systems across AD, Google Workspace, Azure, SIS, and Oracle Cloud ERP.
• Develop, implement, and maintain IAM solutions and systems.
• Troubleshoot IAM-related issues and improve IAM solutions for security and efficiency.
• Assess risks related to AD and PAM, ensuring regulatory compliance.
• Administer user accounts, licensing, and lifecycle processes including offboarding.
• Leverage Power Automate, Power BI, and Business Objects for data analysis and reporting.
• Collaborate with HR, Finance, and IT teams to support secure user management.

Skills

Identity and Access Management

Scripting and automation

Communication skills

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Microsoft Graph

PowerShell

Active Directory

SQL

Azure

Power Automate

Power BI

Business Objects

Oracle Cloud ERP

Job description

Owns and optimizes the processes for user account creation and user access permission assignment and revocation. Collaborates with cross-functional teams to enhance the organization's automated user creation and permission assignment to all key systems.Performs other duties as assigned.

Responsibilities

• Manage identity and access systems across Active Directory, Google Workspace, Azure, Student Information System, and Oracle Cloud ERP platforms.
• Develop, implement, and maintain identity and access management solutions and systems.
• Troubleshoot, identify, and resolve technical identity and access management related issues.
• Improve identity and access management solutions and systems for protection against evolving threats and efficiency.
• Assess and report on risks related to Active Directory and Privileged Access Management (PAM), ensuring compliance with regulatory requirements.
• Administer user accounts, manage Microsoft licensing, and coordinate account lifecycle processes including creation, modification, and offboarding.
• Leverage Power Automate, Power BI, and Business Objects for data analysis, reporting, and process automation.
• Perform other duties as assigned.

Qualifications

Experience, Education and Training:

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.

• Three years of experience in systems administration to include Identity and Access Management (IAM).
• Three years of experience with Microsoft Graph, PowerShell scripting, Microsoft Servers and Active Directory environments.
• Three years of experience with SQL and database integration.

Preferred Qualifications:

• Experience with Oracle Cloud ERP account management and Oracle/AD integration.
• Experience with Business Objects report development.
• Familiarity with Zero Trust and Cloud Identity federation models.

Supervisory or team lead experience preferred.

Note:Other combinations of applicable education, training, and experience that provide the knowledge, skills, and abilities necessary to perform effectively in the position may be considered.

Licenses and Certificates:

One or more of the following certifications are preferred:

• Microsoft Certified: Azure Security Engineer Associate
• CompTIA Security+

Oracle certifications related to ERP SAAS solutions preferred.

Possession of a valid driver's license equivalent to a non-commercial class C Maryland driver's license is required.

Knowledge, Skills, and Abilities:

• Skill in scripting and programming languages such as Python, PowerShell, SQL, and VBA, with knowledge of C++ desirable.
• Skill in analysis and problem-solving, particularly in IAM and user lifecycle management.
• Knowledge of Single Sign-On (SSO) and federation solutions, including Azure AD, Azure B2C, Microsoft Graph, and Google Workspace.
• Ability to automate and optimize processes using tools like Power Automate and Power BI.
• Strong organizational, collaboration, and communication skills, with the ability to work in agile or iterative environments.
• Ability to interface effectively with HR, Finance, and IT teams for security and user management needs.

PHYSICAL AND ENVIRONMENTAL CONDITIONS:

The work of this class is generally sedentary and performed in an office environment. Duties require travel to schools and facilities throughout Baltimore County and other areas. May involve the lifting and carrying of heavy network infrastructure equipment. May be required to use their own vehicle to respond to remote sites for troubleshooting.

CONDITIONS OF EMPLOYMENT:

Employees in this classification are Essential-As-Neededpersonnelwhich states that employees are required to work when schools and/or offices are closed during adverse weather conditions or any other emergency when contacted and directed to do so.

Persons appointed to this class will participate in a rotational 24/7 on-call and may be required to work beyond their normally scheduled hours with little or no advanced notice. Work includes evenings and weekends as required.

FLSA: Exempt

RETIREMENT: Eligible for the Baltimore County Employees' Retirement System.

GRADE: OPE Grade 09

SALARY:$102,348 - $164,624

Visit the BCPS Office of Payroll website for additional information on pay scales, other compensation and leave accruals at:

OTHER COMPENSATION:Position may be eligible for relocation bonus, extra duty activities pay, or other student activities pay as defined in the applicable Bargaining Unit Agreement.

BENEFITS: BCPS offers a comprehensive benefits program for eligible employees including options for medical plans, dental plans, vision, life insurance, flexible spending accounts, disability coverage, and 403(b)/457 plans. Other benefits include paid holidays, sick, personal business, and bereavement days, and flexible leave options such as FMLA, sick bank, and board approved leaves. All new hires will attend a benefits meeting upon hire.

This posting describes the duties and responsibilities of a position or group of positions. It shall not be held to exclude duties not referenced nor limit the right of management to assign work to employees.

NON-DISCRIMINATION STATEMENT:

The Board of Education of Baltimore County does not discriminate on the basis of race, color, religion, sex, national origin, age, marital status, sexual orientation, gender identity, genetic information, disability, or veteran status in matters affecting employment or in providing access to educational programs or activates and provides equal access to the Boy Scouts and other designated youth groups.Inquiries regarding the Board's nondiscrimination policies should be directed to: EEO Officer, Office of Equal Employment Opportunity, Baltimore County Public Schools, 6901 Charles Street, Building B, Towson, Maryland 21204 (443-809-8937).