Identity and Access Management Engineer - 60019378

Doc PersonalBeratung GmbH; Columbia (SC); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Paid leave and holidays

Retirement options

Job summary

The Department of Administration's Office of Technology and Information Services is seeking an Identity and Access Management Engineer to join our team in Columbia, SC. The role focuses on installing, configuring, maintaining, and troubleshooting servers, administering MS Active Directory, Quest tools, and IBM BigFix, while ensuring alignment with DTO/DIS security standards.

Required qualifications include a bachelor's degree or equivalent experience, six years of enterprise IT experience, and

Qualifications

• Bachelor's degree in communications, business administration, computer science, MIS, or related field; experience may substitute for degree on a year-for-year basis.
• Six (6) years of hands-on enterprise IT architecture experience including planning, development, deployment and governance for an enterprise class service provider.
• Knowledge of Active Directory and Identity services with emphasis on identity management, PAM, and password management.
• Knowledge of RBAC, Azure AD, ADFS, configuration management, SSO/SaaS integration and Group Policy management.
• Familiarity with CIS DISA STIG/ PUB1075 security standards preferred.

Responsibilities

• Assist with support and administration of MS Active Directory infrastructure including design, installation, configuration, maintenance and performance monitoring.
• Assist with support and administration of Quest tools (Change Auditor, Enterprise Reporter, Active Role Server, Password Manager) and BigFix servers.
• Ensure daily administration procedures conform to DTO/DIS standards and regulatory requirements.
• Provide system administration of solutions to meet DIS 200 requirements (ObservelT, CyberArk).
• Perform other duties as assigned.

Skills

Active Directory

PAM (Privileged Access Management)

Azure AD

RBAC

Group Policy

PowerShell

Education

Bachelor's degree in computer science or related field

Tools

Quest tools

IBM BigFix

CyberArk

PowerShell scripting

Job description

Identity and Access Management Engineer

The Department of Administration's Office of Technology and Information Services is seeking an Identity and Access Management Engineer to join our team. The Department of Administration's Office of Technology and Information Services (OTIS) is the state’s central provider of IT services to state government agencies. OTIS oversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies. In this role you will work as a member of the Data Center Infrastructure team to install, configure, maintain, update and troubleshoot servers and server software. You will assist with daily support, configuration and administration of MS Active Directory, BigFix infrastructure servers, and Dell Quest tools. This role will maintain, configure, update and monitor all systems utilizing approved software, conforming to DTO and DIS standards and policies ensuring all procedures and processes will properly secure data, applications, and communications conforming specifically to DTO and DIS security standards, policies and procedures.

The position is onsite Columbia, SC.

Responsibilities of the Identity and Access Management Engineer:

• Assist with support and administration of MS Active Directory infrastructure to include design, installation, configuration, maintenance, and performance monitoring of underlying server and application software.
• Assist with support and administration of Quest tools, such as Change Auditor, Enterprise Reporter, Active Role Server, Password Manager and administration of IBM BigFix root/relay servers and application.
• Ensure daily administration procedures and processes conform to and are compliant with OTO standards and policies, and all appropriate statutory/regulatory requirements.
• Provide system administration of solutions to meet DIS 200 requirements, such as ObservelT and CyberArk applications and their underlying infrastructure.
• Perform other duties as assigned.

• A bachelor's degree in communications, business administration, computer science, management information science, or a related field. Relevant experience can be substituted for the bachelor's degree on a year-for-year basis.
• Six (6) years of proven hands-on experience with enterprise information technology architecture including, but not limited to, planning, development, implementation and governance of technologies & services for an enterprise class service provider.

Additional Requirements:

• Knowledge of Active Directory and Identity services with emphasis on identity management, privileged Access Management (PAM), and Password management, conditional access policies.
• Knowledge of role-based access control (RBAC), Azure AD, ADFS, configuration management, SSOSaaS integration and Group Policy management.
• Familiarity with security compliance standards such as CISDISA STIGPUB1075 preferred.
• Ability to establish positive working relationships with technical staff, customers and others involved in server management.
• CJIS Certification is a requirement of this position.
• Position may require overnight travel.
• Position may require employee to work evenings and weekends.
• Position requires on-call shifts and call back.
• Position required to report to work during emergency situations and hazardous weather events.
• This position may require the employee to work from a remote location beyond the standard 37.5 hours/week and could include working nights, weekends, and holidays.

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.

• Microsoft Certified Systems Engineer (MCSE) and Microsoft Certified Professional (MCP).
• Strong technical experience with identity and or configuration management- HCL BigFix and Quest/One Identity Software.
• Experience with automation using Powershell Scripting and or ServiceNow.

The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment.

The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:

• Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children.
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• S.C. Deferred Compensation Program available
• Retirement benefit choices
  • State Retirement Plan(SCRS)
  • State Optional Retirement Program(State ORP)

*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.