Identity and Access Management Engineer - 60019378

State-of-South-Carolina; South Carolina; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Vacation and sick leave

Paid holidays

Parental Leave

Retirement plans (SCRS/ORP)

Job summary

State of South Carolina's Department of Administration seeks an Identity and Access Management Engineer to join OTIS. The role focuses on administering Active Directory, Quest tools, and BigFix, ensuring security compliance and DIS standards across enterprise systems.

Columbia, SC onsite; travel may be required; CJIS certification and experience with RBAC, Azure AD, ADFS and PowerShell scripting are expected.

Qualifications

• Bachelor's degree required; experience substituted year-for-year.
• Six years of hands-on experience with enterprise IT architecture for an enterprise class service provider.
• Knowledge of Active Directory and Identity services with PAM and password management.
• Knowledge of RBAC, Azure AD, ADFS, configuration management, and Group Policy management (SSO SaaS integration).
• Familiarity with CISDISA STIGPUB1075 standards preferred.
• CJIS Certification is a requirement.
• Overnight travel may be required; work evenings and weekends; on-call shifts.
• Remote work beyond standard hours and potential night/weekend shifts may apply.
• MCSE and MCP certifications are desirable; strong scripting with PowerShell and ServiceNow experience are assets.

Responsibilities

• Assist with support and administration of MS Active Directory infrastructure, including design, installation and monitoring.
• Assist with Quest tools (Change Auditor, Enterprise Reporter, ARS, Password Manager) and BigFix servers.
• Ensure procedures comply with DTO/DIS standards and security policies.
• Provide system administration to meet DIS 200 requirements (ObservelT, CyberArk).
• Perform other duties as assigned.

Skills

Active Directory

Identity management

Privileged Access Management

RBAC

Azure AD

ADFS

Group Policy

PAM

Education

Bachelor's degree in communications, business administration, computer science, management information science, or related field

Tools

HCL BigFix

Quest/One Identity

ServiceNow

Job description

Identity and Access Management Engineer

The Department of Administration's Office of Technology and Information Services is seeking an Identity and Access Management Engineer to join our team. The Department of Administration's Office of Technology and Information Services (OTIS) is the state’s central provider of IT services to state government agencies. OTIS oversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies. In this role you will work as a member of the Data Center Infrastructure team to install, configure, maintain, update and troubleshoot servers and server software. You will assist with daily support, configuration and administration of MS Active Directory, BigFix infrastructure servers, and Dell Quest tools. This role will maintain, configure, update and monitor all systems utilizing approved software, conforming to DTO and DIS standards and policies ensuring all procedures and processes will properly secure data, applications, and communications conforming specifically to DTO and DIS security standards, policies and procedures.

The position is onsite Columbia, SC.

Responsibilities of the Identity and Access Management Engineer:

• Assist with support and administration of MS Active Directory infrastructure to include design, installation, configuration, maintenance, and performance monitoring of underlying server and application software.
• Assist with support and administration of Quest tools, such as Change Auditor, Enterprise Reporter, Active Role Server, Password Manager and administration of IBM BigFix root/relay servers and application.
• Ensure daily administration procedures and processes conform to and are compliant with OTO standards and policies, and all appropriate statutory/regulatory requirements.
• Provide system administration of solutions to meet DIS 200 requirements, such as ObservelT and CyberArk applications and their underlying infrastructure.
• Perform other duties as assigned.

Required Qualifications:

• A bachelor's degree in communications, business administration, computer science, management information science, or a related field. Relevant experience can be substituted for the bachelor's degree on a year-for-year basis.
• Six (6) years of proven hands‑on experience with enterprise information technology architecture including, but not limited to, planning, development, implementation and governance of technologies & services for an enterprise class service provider.

Additional Requirements:

• Knowledge of Active Directory and Identity services with emphasis on identity management, privileged Access Management (PAM), and Password management, conditional access policies.
• Knowledge of role‑based access control (RBAC), Azure AD, ADFS, configuration management, SSOSaaS integration and Group Policy management.
• Familiarity with security compliance standards such as CISDISA STIGPUB1075 preferred.
• Ability to establish positive working relationships with technical staff, customers and others involved in server management.
• CJIS Certification is a requirement of this position.
• Position may require overnight travel.
• Position may require employee to work evenings and weekends.
• Position requires on‑call shifts and call back.
• Position required to report to work during emergency situations and hazardous weather events.
• This position may require the employee to work from a remote location beyond the standard 37.5 hours/week and could include working nights, weekends, and holidays.

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.

• Microsoft Certified Systems Engineer (MCSE) and Microsoft Certified Professional (MCP).
• Strong technical experience with identity andor configuration management- HCL BigFix and Quest/One Identity Software.
• Experience with automation using Powershell Scripting andor ServiceNow.

The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.

The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:

• Health, dental, vision, long‑term disability, and life insurance for employees, spouse, and children. Click here for additional information.
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• S.C. Deferred Compensation Program available(S.C. Deferred Compensation)
• Retirement benefit choices*
  • State Retirement Plan(SCRS)
  • State Optional Retirement Program(State ORP)

*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.