Identity and Access Management (IAM) Solutions Architect

King County, WA; Seattle (WA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits package

Job summary

King County's Department of Information Technology (KCIT) seeks a highly skilled Identity and Access Management (IAM) Solutions Architect to lead strategy and design for IAM across the County. You will develop modern identity architectures that streamline lifecycle management and simplify the enterprise identity portfolio.

As a senior member of the Security and Privacy team, you will collaborate with peer architects and IT staff to translate business requirements into long-term IAM designs,

Qualifications

• In depth experience designing and fine-tuning Enterprise Identity Architecture.
• Expert level knowledge of Active Directory and Entra ID.
• Thorough understanding of Public Key Infrastructure, Certificate Management and HSMs.
• Strong background in managing Enterprise Applications and Registrations and using Managed Identities and Service Principals.
• Good working knowledge of Privileged Access Management.
• Expert level knowledge of DNS and DHCP.
• Full understanding of Modern authentication, particularly related to Azure (SSO, Tokens, MFA, passkeys, API permissions).
• Full understanding of Group and Identity lifecycle management.
• Full understanding of Directory syncing architecture including AD Connect and Cloud Sync.
• Expansive knowledge on access tiering, management planes and privileged access workstations.
• Good knowledge of Intune and SCCM Device Management and Compliance Policies.
• Solid understanding of networking concepts, Border segments, Trusts, and Policies.

Responsibilities

• Collaborate with peer architects, service owners, and other technical staff in determining the optimum IAM designs for vendor and in-house developed application solutions.
• Translate business requirements into long-term Identity and Access architecture designs.
• Create and manage architectural strategies and roadmaps across multiple projects, functional teams, platforms, and/or technology systems to support the enterprise architecture.
• Consult with internal and external customers, stakeholders, and IT staff to align reference architectures with business and technical requirements.
• Keep up with the ever-changing IAM landscape by tracking all changes to the technologies in use as well as the security ramifications involved.
• Other duties as assigned.

Skills

Identity architecture

Active Directory

Entra ID

Public Key Infrastructure

Privileged Access Management

DNS/DHCP

Azure authentication (SSO, MFA)

Group/Identity lifecycle

AD Connect/Cloud Sync

Intune/SCCM

Networking concepts

Tools

Intune

SCCM

Azure AD

Job description

Summary

King County's Department of Information Technology (KCIT) is seeking a highly skilled Identity and Access Management (IAM) Solutions Architect to join our Security and Privacy team. The IAM Solution Architect plays a key role in leading strategy and design for IAM across the County, developing modern identity architectures that streamline lifecycle management and simplify the enterprise identity portfolio.

About King County Department Of Information Technology (KCIT)

King County is committed to being the best-run government in the nation, and King County Information Technology (KCIT) is helping lead that transformation. KCIT harnesses the power of technology to modernize operations, advance digital equity and social justice, and deliver innovative solutions that engage, empower, and serve our residents, businesses, and community partners. Recognized by the National Association of Counties (NACo) for excellence in vision, strategy, innovation, and collaboration, KCIT is focused on delivering smart, secure, and customer-centered technology services that strengthen county operations and support thriving, resilient communities. As the technology business partner to all 18 County departments, KCIT provides the foundational systems and services that power many of the region’s most essential functions. We work side-by-side with our partners to design and deliver technology solutions that enhance customer experience and advance King County’s mission. Learn more about KCIT at: http://kingcounty.gov/depts/it.aspx

Job Duties

• Collaborate with peer architects, service owners, and other technical staff in determining the optimum IAM designs for vendor and in-house developed application solutions.
• Translate business requirements into long-term Identity and Access architecture designs.
• Create and manage architectural strategies and roadmaps across multiple projects, functional teams, platforms, and/or technology systems to support the enterprise architecture.
• Consult with internal and external customers, stakeholders, and IT staff to align reference architectures with business and technical requirements.
• Keep up with the ever-changing IAM landscape by tracking all changes to the technologies in use as well as the security ramifications involved.
• Other duties as assigned.

Experience, Qualifications, Knowledge, Skills

• In depth experience designing and fine-tuning Enterprise Identity Architecture
• Expert level knowledge on the inter-workings of Active Directory and Entra ID
• Thorough understanding of Public Key Infrastructure, Certificate Management and HSMs
• Strong background in managing Enterprise Applications and Registrations and using Managed Identities and Service Principals
• Good working knowledge of Privileged Access\Identity Management
• Expert level knowledge of DNS and DHCP
• Full understanding of Modern authentication, particularly related to Azure (SSO, Tokens, MFA, passkeys, API permissions, etc.)
• Full understanding of Group and Identity lifecycle management.
• Full understanding of Directory syncing architecture including AD Connect and Cloud Sync
• Expansive knowledge on access tiering, management planes and privileged access workstations
• Good knowledge of Intune and SCCM Device Management and Compliance Policies
• Solid understating of networking concepts, Border segments, Trusts, and Policies

Desirable Qualifications

• Application proxy competency
• History with Guest access and B2C a plus
• Technical certifications related to information security, risk or compliance, information technology such as network, server, database, cloud infrastructure or engineering, project management methodologies, leadership or other relevant certifications are desired

Hybrid Work

KCIT works in a hybrid model, with days in the office as well as telecommuting. The ratio of remote to onsite work will be dependent on business needs and is subject to change. The primary onsite location is the Chinook Building, 401 5th Ave, Seattle, WA 98104. Employees must reside in Washington state and within a reasonable distance to their King County worksite to respond to workplace reporting requirements. King County has a robust collection of tools and resources to support working remotely. The individual selected for this opportunity will join an innovative and progressive team that is redefining how we work as we transition to the department's hybrid environment. Employees will be provided with a County-issued laptop and must maintain a home workspace with an internet connection where they can reliably perform work and remain available and responsive during scheduled work hours.

Work Schedule

The normal workweek for this position is Monday through Friday, 8:00 a.m. to 5:00 p.m. Alternative schedules may be considered by your manager.

FLSA Status

This position is FLSA Exempt and is not eligible for overtime pay.

Classification

Solutions Architect (743801)

Union

This position is represented by Protec17: Information Technology.

Who May Apply

This recruitment is open to all applicants. This recruitment may be used to fill additional vacancies that may occur. We value diversity, diverse perspectives and life experience and encourage people of all background to apply.

King County's Vision, Mission, and ACTIVATE Values unite us

King County serves residents with a relentless sense of urgency, delivering on commitments with transparency and accountability. We are action-oriented, creative problem solvers who collaborate across roles, engage directly with communities, and challenge the status quo to achieve meaningful impact. As a unified team, we uphold high ethical and stewardship standards, embrace change, stay curious, and continuously improve. Across all interactions, we listen first, act quick…

Learn more about our Vision, Mission, and ACTIVATE Values here and visit our Why work at King County page here.

King County is an Equal Employment Opportunity (EEO) Employer

No person is unlawfully excluded from employment opportunities based on sex, race, color, national origin, ethnicity, religious affiliation, disability, sexual orientation, gender identity or expression, age except by minimum age and retirement provisions, pregnancy, status as a family caregiver, parental status, marital status, military status or status as a veteran who was honorably discharged or who was discharged solely as a result of the person's sexual orientation or gender identity or expression, citizenship or immigration status, genetic information, or other protected class. However, to the extent that distinction or differential treatment on the basis of citizenship or immigration status is authorized by either federal or state law, regulation, or government contract, it is not an unfair practice.

Our EEO policy applies to all employment actions, including but not limited to recruitment, hiring, selection for training, promotion, transfer, demotion, layoff, termination, rates of pay or other forms of compensation.

Benefits

King County offers a highly-competitive compensation and benefits package designed to meet the diverse needs of our employees and support our employees' health and well-being. Eligible positions receive the following benefits and have access to the following programs:

• Excellent medical, dental, and vision coverage options: King County provides eligible employees with options, so they can decide what’s best for themselves and their eligible dependents
• Life and disability insurance: employees are provided basic coverage and given the opportunity to purchase additional insurance for both the employee and eligible dependents
• Retirement: eligible King County employees may participate in a pension plan through the Washington State Department of Retirement Systems and a 457(b) deferred-compensation plan
• Transportation program and ORCA transit pass
• 12 paid holidays each year plus two personal holidays
• Generous vacation and paid sick leave
• Paid parental, family and medical, and volunteer leaves
• Flexible Spending Account
• Wellness programs
• Onsite activity centers
• Employee Giving Program
• Employee assistance programs
• Flexible schedules and telecommuting options, depending on position
• Training and career development programs

For additional information about employee benefits, visit our Benefits, Payroll, and Retirement Page. This is a general description of the benefits offered to eligible King County employees, and every effort has been made to ensure its accuracy. If any information on this document conflicts with the provisions of a collective bargaining agreement (CBA), the CBA prevails.

NOTE

Benefits for Term Limited Temporary (TLT) or Short Term Temporary (STT) positions, including leave eligibility and/or participation in the pension plan through the Washington State Department of Retirement Systems, will vary based upon the terms and details of the position. Short Term Temporary positions are not eligible for an ORCA transit pass.