Information Security Administrator

Office of the New York State Attorney General; Town of Colonie (NY); On-site; USD 86,681 - 109,650; Full time

Job summary

A state office is hiring for the role of Information Security Administrator in Latham, NY. This position involves overseeing the IAM strategy and managing security operations related to identity management. Candidates should have a relevant Bachelor's degree and experience in information technology or security. Strong skills in IAM tools like Microsoft Entra ID are preferred. The workplace encourages diversity and candidates must be authorized to work in the U.S.

Qualifications

• Bachelor's degree with at least 15 credit hours in cyber security, information assurance, or IT.
• Two years of information technology experience, with one in security assurance.
• Seven years of information security experience.

Responsibilities

• Lead development and implementation of IAM strategy.
• Manage security operations related to identity and access management.
• Conduct regular audits and assessments for compliance.

Skills

Identity and Access Management (IAM)

Information security

Incident response

Technical skills in directories and SSO

Application integration patterns

Education

Bachelor’s degree in Cyber Security, Information Assurance, or IT

Associate's degree in any field

Tools

Microsoft Entra ID

Oracle Identity Manager

Job description

Information Security Administrator – Office of the New York State Attorney General – Latham, NY

Vacancy ID: 204592

Status: Permanent Non-competitive

Bureau: Information Technology

Salary Grade (SG): PEF SG23 ($86,681-$109,650)

Base Pay Range

$86,681.00/yr – $109,650.00/yr

How to Apply

Send your resume, cover letter, and a copy of your degree/transcript (if applicable) to [e-mail]. Include Vacancy ID #204592 and the position title in the email subject.

Duties

• Lead the development and implementation of the IAM strategy aligned with business objectives and regulatory requirements in conjunction with security policy.
• Support design and documentation for IAM architecture, identity governance, and role-based access control.
• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Identify and rectify gaps within current infrastructure as it relates to onboarding and offboarding personnel.
• Ensure IAM processes comply with industry standards (NIST, ISO, CIS) and internal policies developed by the CISO and SecOps teams.
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance.
• Assess current applications and architecture to ensure implementations align with identity-first security strategies, best practices, and approved standards.
• Define integration methodologies for IAM solutions with existing and onboarding applications, including cloud services, on-prem systems, and third‑party applications (Entra ID, Azure, on‑prem Active Directory, Oracle Identity Manager).
• Work closely with other teams within the IT bureau (O365, Windows, Linux, EA, etc.) to ensure fluid cohesiveness.
• Other duties as assigned.

Minimum Qualifications

• Bachelor’s degree with at least 15 credit hours in cyber security, information assurance, or information technology; and two years of information technology experience, at least one year of which is information security or information assurance experience.
• A bachelor’s degree in any field with at least three years of information technology experience, at least one year of which is information security or information assurance experience.
• An associate's degree in any field with five years of general information technology experience at least one of which is information security or information assurance experience.
• At least seven years of information security or information assurance experience.

Preferred Qualifications

• 2+ years of dedicated identity and access management experience with multi‑environment experience (Oracle Identity + Microsoft) a plus.
• 5+ years of information technology administration experience or equivalent combination of work and educational experiences.
• Intermediate to advanced knowledge of identity technologies and concepts.
• Intermediate to advanced knowledge of directories, Single-Sign On (SSO), identity federation, privileged access management, automated life‑cycle management.
• Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+).
• Understanding in application integration patterns and API‑based access control.
• Understanding of Microsoft Entra ID hardening, role‑based access control, active directory attributes and privileged identity management.
• Experience with Microsoft Entra ID by configuring and maintaining Conditional Access policies, enforcing MFA, and securing authentication methods to reduce identity‑related risks.
• Experience implementing controls, identity lifecycle management and third‑party integrations for automation using Microsoft Entra ID Governance.
• Strong familiarity with administering and maintaining Role‑Based Access Control (RBAC) in Microsoft Entra ID, including the creation of custom roles, access reviews, and ensuring alignment with least‑privilege principles.
• Ability to leverage Active Directory and Entra ID user attributes to automate access provisioning and group memberships using dynamic group rules.
• Skilled in supporting Privileged Identity Management (PIM) by configuring just‑in‑time access to critical roles, implementing approval workflows, and conducting periodic access reviews.

Employment Information

Seniority Level: Associate

Employment Type: Full‑time

Job Function: Information Technology

Industry: Law Practice

EEO Statement

Candidates from diverse backgrounds are encouraged to apply. The OAG is an equal opportunity employer and is committed to workplace diversity.

The Office of the NYS Attorney General (OAG) cannot provide sponsorship for work authorization. Candidates must be authorized to work in the United States to be employed by this agency. Employees must continue to maintain work authorization for the duration of their employment. This agency does not participate in E‑Verify for work authorization purposes.