IT Specialist (Senior Identity, Credential, and Access Management Security Architect)

Summary

This position is located at Bureau of the Fiscal Service, Identity Credentialing and Access Management Division. As a IT Specialist (Senior Identity, Credential, and Access Management Security Architect), you will be responsible for applying advanced IT and information security principles, concepts, methods, standards, and practices sufficient to develop and interpret policies, procedures, and strategies governing the planning, design, and delivery of secure ICAM services.

Duties

***Important: This vacancy uses a two-phase application process. This is Phase 1 of 2 for this vacancy. To be considered for this position, you must complete both phases of the application process. *** Phase 1: You must first complete and submit your application under this announcement. Phase 2: After this announcement closes, eligible applicants will receive an email containing an exclusive link to a separate competency assessment announcement. You must use that link to complete and submit Phase 2. You must submit a résumé under both announcements, and both announcements must show Application Submitted for your application to be considered complete. You will receive application status updates only under the Phase 1 announcement. Additional instructions for completing the competency assessment will be provided in the Phase 2 announcement. Phase 2 is expected to take at least one hour to complete. Failure to complete and submit both Phase 1 and Phase 2 will result in an incomplete application and removal from further consideration. As an IT Specialist (Senior Identity, Credential, and Access Management Security Architect), you will: Serve as the Fiscal Service expert regarding the Bureau's and customer organizations' Identity, Credential, and Access Management (ICAM) infrastructure and identity security architecture, and as such, interfaces with senior Fiscal Service, Treasury, Federal Reserve, and franchise customer personnel on matters relating to ICAM design, security, and enterprise architecture. Design, develop, and manage secure authentication and identity management systems that meet current and future business requirements, applying and extending existing architectures to ensure scalability, resilience, and security. Evaluate identity and access management technologies and protocols (e.g., SAML, OAuth2, OpenID Connect) to identify potential security vulnerabilities, attack vectors, and risks associated with authentication, authorization, and federation models, and incorporate appropriate mitigations into system designs. Assess emerging threats and exploits related to identity systems, including token-based attacks, assertion misuse, trust exploitation scenarios, and other identity-focused threat vectors, and ensure that ICAM architectures incorporate appropriate safeguards. Evaluate cryptographic implementations and Public Key Infrastructure (PKI) architectures, including key management practices, certificate trust models, and entropy considerations, to ensure secure authentication and data protection mechanisms. Requirements

PLEASE NOTE: Based on the current hiring restrictions, selectees may be subject to additional approvals prior to an offer being extended. All newly appointed employees to the competitive (or excepted) service are subject to a probationary (or trial) period. During this time, your performance, conduct, and suitability for continued employment will be evaluated. You will not automatically convert to permanent status at the end of the probationary (or trial) period. Your supervisor must affirmatively determine that continued employment is in the best interest of the Federal service. If no certification is made before the probationary (or trial) period ends, your appointment will be terminated. You are encouraged to actively engage with your supervisor, seek feedback, and understand role expectations. Additional guidance and support will be provided during onboarding. Must successfully complete a background investigation. Periodic reinvestigation is required no later than five years after selection and at least every succeeding five years. Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency. Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer. If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so. Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S. Obtain and use a government-issued charge card for business-related travel. File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on. Key Requirements: Please refer to the "Additional Information" section for additional Conditions of Employment. Click "Print Preview" to review the entire announcement before applying. To preview the application questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13031775 Must be U.S. Citizen or U.S. National Qualifications

You must meet the following requirements by the closing date of this announcement. The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé. Specialized Experience for the GS-13, you must have one year (full 52 weeks) of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position is defined as: Experience designing, engineering, implementing, or enhancing enterprise Identity, Credential, and Access Management (ICAM) or identity security technologies, including authentication, federation, access control, multifactor authentication, or Public Key Infrastructure. AND Experience analyzing identity, cybersecurity, architecture, integration, or system-performance issues; evaluating technical alternatives and security risks; and developing or implementing secure solutions across enterprise systems. AND Experience communicating technical risks, architectural recommendations, and implementation approaches to technical and nontechnical stakeholders to influence decisions and support the modernization or secure operation of mission-critical services. In addition to meeting specialized experience, individuals must meet proficiency levels in each of the following competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Technical Competence, and Teamwork. For the required proficiency levels and competency definitions, please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series, 2210 A competency assessment will be used to determine whether you meet the required competency proficiency levels. Once this announcement closes, eligible applicants will receive an email containing an exclusive link to access and complete Phase 2 of the application process.

How You Will Be Evaluated

This announcement is issued under "Direct-Hire" authority. Consistent with 5 U.S.C 3304 and OPM regulations (5 CFR 337 Subpart B) on direct-hire. Competitive examining rules providing for rating and ranking and veterans' preference do not apply. This vacancy uses a two-phase application process. You must complete and submit both Phase 1 and Phase 2 to receive consideration. Failure to complete and submit both announcements will result in an incomplete application and no further consideration. Your qualifications will be evaluated based on your application materials (e.g., résumé, supporting documents), the responses you provide on the application questionnaire, and the result of the online assessments and competency assessment. You will be assessed on the following competencies (knowledge, skills, abilities, and other characteristics): Accountability Attention to Detail Customer Service Decision Making Flexibility Influencing/Negotiating Integrity/Honesty Interpersonal Skills Learning Reading Comprehension Reasoning Self-Management Stress Tolerance Teamwork To be considered for this position, you must complete all required steps in the process. In addition to the application and questionnaire, this position requires an online assessment that measures critical general competencies needed to perform the job. Overstating your qualifications or experience in your application materials or questionnaire may result in removal from consideration. Cheating on the online assessment may also result in removal from consideration. The USA Hire Assessment includes a cut score based on the minimum level of required proficiency in these critical general competencies. You must meet or exceed the cut score to be considered. You will not be considered for the position if you score below the cut score or fail to complete the assessment. Phase 1: You must complete and submit this announcement, including the application, questionnaire, required documents, and any required online assessments. Phase 2: After this announcement closes, eligible applicants will receive an email containing an exclusive link to a separate competency assessment announcement. You must use the link to complete and submit the required competency questions. The responses will be reviewed by a Subject Matter Expert (SME) to determine whether you meet the required competency proficiency levels. If you are a displaced or surplus Federal employee (eligible for the Career Transition Assistance Plan(CTAP)/Interagency Career Transition Assistance Plan (ICTAP)) you must meet the definition of well-qualified below to receive priority selection. To be considered well qualified at the GS-13 grade level, and in addition to meeting specialized experience, the applicant must have documented in his/her resume: A solid and comprehensive understanding of the position; AND Be able to perform the required tasks efficiently; AND Be proficient in applying the knowledge, skills, and abilities of the job. To preview the application questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13031775 Referral: All candidates who meet all the qualifications and other eligibility requirements may be referred for consideration. Optional Essay Questions: Applicants may choose to respond to four short essay questions (200 words max each) to help us better understand your alignment with the agency's mission. These responses are optional and will not affect the applicant's eligibility. Other Information

OTHER INFORMATION: We may select from this announcement or any other source to fill one or more vacancies. Factors such as cost effectiveness, labor market conditions and difficulties in filling the position will be reviewed in determining if payment of relocation expenses is in the best interest of the Government. This position is a Special Sensitive position. Student loan repayment may be offered. We offer opportunities for telework. We offer opportunities for flexible work schedules. This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into "Continuous Vetting." Enrollment in Continuous Vetting will result in automated record checks being conducted throughout one's employment with Treasury. The successful candidate will also be enrolled into FBI's Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time. For more information about individual rights, Noncriminal Justice Applicant's Privacy Rights - FBI, FD-258 Privacy Act Statement - FBI, and SEAD-3-Reporting-U.pdf (dni.gov). Our comprehensive benefits are very generous. Our benefits package includes: Challenging work, opportunities for advancement, competitive salaries, bonuses and incentive awards. Eleven paid holidays, 13 days of sick leave, and 13 to 26 days of vacation time each year. Access to insurance programs that may be continued after you retire. A wide choice of health insurance plans, coverage for pre-existing conditions, and no waiting periods. We pay a substantial amount (up to 75%) of the health insurance premiums. A retirement program which includes employer-matching contributions. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. (https://appsupport-usastaffing.opm.gov/hc/en-us/sections/45063131363475-Reasonable-Accommodation-Information)