Identity and Access Management (IAM) Solutions Architect

King County; Seattle (WA); Híbrido; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

King County’s Department of Information Technology (KCIT) seeks an IAM Solutions Architect to lead strategy and design for enterprise identity across the County. You will shape modern identity architectures that streamline lifecycle management and enterprise identity portfolios.

You will translate business requirements into long-term IAM designs, collaborate with peers, and build roadmaps across projects, platforms, and technologies while staying current on IAM security implications.

Formación

• In depth experience designing and fine-tuning Enterprise Identity Architecture.
• Expert level knowledge on the inter-workings of Active Directory and Entra ID.
• Thorough understanding of Public Key Infrastructure, Certificate Management and HSMs.
• Strong background in managing Enterprise Applications and Registrations and using Managed Identities and Service Principals.
• Good working knowledge of Privileged Access Identity Management.
• Expert level knowledge of DNS and DHCP.
• Full understanding of Modern authentication, particularly related to Azure (SSO, Tokens, MFA, passkeys, API permissions).
• Full understanding of Group and Identity lifecycle management.
• Full understanding of Directory syncing architecture including AD Connect and Cloud Sync.

Responsabilidades

• Collaborate with peer architects, service owners, and other technical staff in determining the optimum IAM designs for vendor and in-house developed applications.
• Translate business requirements into long-term Identity and Access architecture designs.
• Create and manage architectural strategies and roadmaps across multiple projects, functional teams, platforms, and technology systems.
• Consult with internal and external customers, stakeholders, and IT staff to align reference architectures with business and technical requirements.
• Keep up with the ever-changing IAM landscape by tracking all changes to the technologies in use as well as the security ramifications involved.
• Other duties as assigned.

Conocimientos

IAM Architecture

Active Directory

Entra ID

PKI

Managed Identities

Service Principals

Privileged Access

DNS and DHCP

Azure AD SSO

Directory Sync

Herramientas

Intune

SCCM

AD Connect

Cloud Sync

Descripción del empleo

King County's Department of Information Technology (KCIT) is seeking a highly skilled Identity and Access Management (IAM) Solutions Architect to join our Security and Privacy team. The IAM Solutions Architect plays a key role in leading strategy and design for IAM across the County, developing modern identity architectures that streamline lifecycle management and simplify the enterprise identity portfolio.

About King County Department of Information Technology (KCIT)

King County is committed to being the best-run government in the nation, and King County Information Technology (KCIT) is helping lead that transformation. KCIT harnesses the power of technology to modernize operations, advance digital equity and social justice, and deliver innovative solutions that engage, empower, and serve our residents, businesses, and community partners.

Recognized by the National Association of Counties (NACo) for excellence in vision, strategy, innovation, and collaboration, KCIT is focused on delivering smart, secure, and customer-centered technology services that strengthen county operations and support thriving, resilient communities. As the technology business partner to all 18 County departments, KCIT provides the foundational systems and services that power many of the region’s most essential functions. We work side-by-side with our partners to design and deliver technology solutions that enhance customer experience and advance King County’s mission. Learn more about KCIT at: http://kingcounty.gov/depts/it.aspx

• Collaborate with peer architects, service owners, and other technical staff in determining the optimum IAM designs for vendor and in-house developed application solutions.
• Translate business requirements into long-term Identity and Access architecture designs.
• Create and manage architectural strategies and roadmaps across multiple projects, functional teams, platforms, and/or technology systems to support the enterprise architecture.
• Consult with internal and external customers, stakeholders, and IT staff to align reference architectures with business and technical requirements.
• Keep up with the ever-changing IAM landscape by tracking all changes to the technologies in use as well as the security ramifications involved.
• Other duties as assigned.

• In depth experience designing and fine-tuning Enterprise Identity Architecture
• Expert level knowledge on the inter-workings of Active Directory and Entra ID
• Thorough understanding of Public Key Infrastructure, Certificate Management and HSMs
• Strong background in managing Enterprise Applications and Registrations and using Managed Identities and Service Principals
• Good working knowledge of Privileged AccessIdentity Management
• Expert level knowledge of DNS and DHCP
• Full understanding of Modern authentication, particularly related to Azure (SSO, Tokens, MFA, passkeys, API permissions, etc.)
• Full understanding of Group and Identity lifecycle management.
• Full understanding of Directory syncing architecture including AD Connect and Cloud Sync
• Expansive knowledge on access tiering, management planes and privileged access workstations
• Good knowledge of Intune and SCCM Device Management and Compliance Policies
• Solid understating of networking concepts, Border segments, Trusts, and Policies

Desirable Qualifications

• Application proxy competency
• History with Guest access and B2C a plus
• Technical certifications related to information security, risk or compliance, information technology such as network, server, database, cloud infrastructure or engineering, project management methodologies, leadership or other relevant certifications are desired

Hybrid Work: KCIT works in a hybrid model, with days in the office as well as telecommuting. The ratio of remote to onsite work will be dependent on business needs and is subject to change. The primary onsite location is the Chinook Building, 401 5th Ave, Seattle, WA 98104.

Employees must reside in Washington state and within a reasonable distance to their King County worksite to respond to workplace reporting requirements.

King County has a robust collection of tools and resources to support working remotely. The individual selected for this opportunity will join an innovative and progressive team that is redefining how we work as we transition to the department's hybrid environment. Employees will be provided with a County-issued laptop and must maintain a home workspace with an internet connection where they can reliably perform work and remain available and responsive during scheduled work hours.

Work Schedule:The normal workweek for this position is Monday through Friday, 8:00 a.m. to 5:00 p.m. Alternative schedules may be considered by your manager.

FLSA Status: This position is FLSA Exempt and is not eligible for overtime pay.

Classification:Solutions Architect (743801)

Union:This position is represented by Protec17: Information Technology.

Who May Apply:This recruitment is open to all applicants. This recruitment may be used to fill additional vacancies that may occur. We value diversity, diverse perspectives and life experience and encourage people of all background to apply.

1. Employment history going back at least seven years if possible (or more to include all relevant experience).
2. A resume including all relevant experience.

If you need this announcement in an alternate language or format, or you would like to request accommodation or assistance in the application or assessment process, please contact Shannon Hoeper at [e-mail]

King County's Vision, Mission, and ACTIVATE Values unite us.

King County serves residents with a relentless sense of urgency, delivering on commitments with transparency and accountability. We are action-oriented, creative problem solvers who collaborate across roles, engage directly with communities, and challenge the status quo to achieve meaningful impact. As a unified team, we uphold high ethical and stewardship standards, embrace change, stay curious, and continuously improve. Across all interactions, we listen first, act quickly, and stay aligned as a team to earn and sustain public trust. Learn more about our Vision, Mission, and ACTIVATE Values here and visit our Why work at King County page here.

King County is an Equal Employment Opportunity (EEO) Employer

No person is unlawfully excluded from employment opportunities based on sex, race, color, national origin, ethnicity, religious affiliation, disability, sexual orientation, gender identity or expression, age except by minimum age and retirement provisions, pregnancy, status as a family caregiver, parental status, marital status, military status or status as a veteran who was honorably discharged or who was discharged solely as a result of the person's sexual orientation or gender identity or expression, citizenship or immigration status, genetic information, or other protected class. However, to the extent that distinction or differential treatment on the basis of citizenship or immigration status is authorized by either federal or state law, regulation, or government contract, it is not an unfair practice.

Our EEO policy applies to all employment actions, including but not limited to recruitment, hiring, selection for training, promotion, transfer, demotion, layoff, termination, rates of pay or other forms of compensation.