Sr. Identity Management Integration Engineer

Arizona State Government; Arizona; Hybrid; USD 88,000 - 108,000; Full time

Benefits offered by this job

Remote Work Program

Job summary

The Arizona Department of Administration (ADOA) – Arizona Strategic Enterprise Technology (ASET) Division seeks a Sr. Identity Management Integration Engineer with deep IAM expertise to drive enterprise security initiatives.

You will design, implement, and operate a statewide SSO solution and integrate applications within the core Identity Management framework. You will collaborate with agency stakeholders, perform sustainment activities, and oversee cloud integrations across AWS, Azure, and GCP

Qualifications

• Minimum of 5 years in system integration with 3 years of hands‑on experience in systems access/provision and information identity integration.
• Strong working knowledge of IAM technology and related vendors.
• Strong working knowledge of OpenID Connect, 2FA/MFA, Active Directory, LDAP, and OAUTH 2.0.
• Major cloud providers (AWS, Azure, or Google Cloud).
• Solid IAM experience with Active Directory, AD, GPO, OU, IIS, and DNS.
• Solid IAM/OKTA expertise including role management, entitlement, access certification, privileged access controls, user/application provisioning, deprovisioning, RBAC, etc.
• Thorough understanding of SAML and Integrated Windows Authentication.

Responsibilities

• Serve as the primary technical expert for single sign‑on (SSO) services, currently Okta Identity Management.
• Architect, implement, and maintain IAM core infrastructure serving statewide employees and connected systems.
• Gather requirements, analyze apps, and design, build, deploy robust SSO solutions.
• Lead onboarding projects by installing, configuring, testing SSO software and integrations.
• Collaborate with Enterprise Security to align IAM operations with policies and standards.
• Provide advanced support to resolve complex access issues and guide helpdesk teams.
• Drive process automation across IAM workflows and integrations.
• Create and maintain IAM operation docs including cloud implementations (AWS/Azure/GCP).

Skills

IAM

SSO

OpenID Connect

2FA/MFA

AD/LDAP

RBAC

Provisioning

SAML

Tools

Okta

AWS

Azure

Google Cloud

OIDC

Job description

ARIZONA DEPARTMENT OF ADMINISTRATION

Delivering results that matter by providing best in class support services.

Job Location:

Arizona Strategic Enterprise Technology (ASET)
This position may offer the ability to work remotely, within Arizona, based upon the department's business needs and continual meeting of expected performance measures
Main Office Location: 100 N 15th Ave, Suite 302 Phoenix AZ, 85007

Posting Details:

Salary: Up to $98,000

Grade: 27

Open Until Business Needs Are Met

Job Summary:

The Arizona Department of Administration (ADOA), Arizona Strategic Enterprise Technology (ASET) Division is seeking a high-performing Sr. Identity Management Integration Engineer with a deep background in Identity and Access Management (IAM) to drive the State's enterprise security initiatives. In this key role, you will be instrumental in the ongoing design, implementation, and daily operations of a comprehensive single sign‑on solution utilized across the State. As a critical member of the technical team, you will focus on sustaining engineering, infrastructure maintenance, and system operations to ensure seamless, secure access for all statewide platforms. Beyond operational stability, you will collaborate closely with agency stakeholders and application owners to architect and deploy custom integration solutions into the core Identity Management framework. Your responsibilities will extend across all facets of infrastructure lifecycle management, including system deployment, proactive performance monitoring, capacity planning, continuous troubleshooting, and direct technical support. If you thrive on optimizing complex IT environments and ensuring enterprise‑level reliability, this role offers an exceptional opportunity to shape and strengthen the State of Arizona's digital infrastructure.

The State of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, and commissions, many State employees participate in the State's Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance.

Job Duties:

• Serve as the primary technical expert for single sign‑on (SSO) services, currently utilizing Okta Identity Management alongside emerging future‑state technologies.
• Architect, implement, and maintain the core infrastructure for centralized Identity and Access Management (IAM) systems serving statewide employees, clients, and connected systems.
• Gather business requirements, analyze existing applications, and evaluate technical implementation options to design, build, and deploy robust SSO solutions.
• Lead application onboarding projects by installing, configuring, and testing SSO software, system integrations, and enterprise applications.
• Collaborate with the State's Enterprise Security team to align all IAM operations with Statewide Information Security Policies and Standards.
• Provide advanced third‑level support to resolve complex customer, network, and application access issues while assisting first‑ and second‑level helpdesk teams.
• Drive continuous process improvement and automation across IAM workflows, policies, and system integrations.
• Create and maintain accurate process documentation for IAM operations, including cloud implementations across AWS, Azure, and Google Cloud Platform (GCP), to meet regulatory compliance standards.

Knowledge, Skills & Abilities (KSAs):

Knowledge of:

• Minimum of 5 years in system integration with 3 years of hands‑on experience in systems access/provision and information identity integration.
• Strong working knowledge of IAM technology and related vendors.
• Strong working knowledge of OpenID Connect, 2FA/MFA, Active Directory, LDAP, and OAUTH 2.0.
• Major cloud providers (Amazon Web Services, Microsoft Azure, or Google Cloud).
• Solid IAM experience with Active Directory, AD, GPO, OU, IIS, and DNS.
• Solid IAM/OKTA expertise including role management, entitlement, access certification, privileged access controls, user/application provisioning, deprovisioning, RBAC, etc.
• Thorough understanding of SAML and Integrated Windows Authentication.
• Administration