Identity and Access Management Engineer - 60019378

Job Responsibilities

Identity and Access Management Engineer The Department of Administration's Office of Technology and Information Services is seeking an Identity and Access Management Engineer to join our team. The Department of Administration's Office of Technology and Information Services (OTIS) is the state’s central provider of IT services to state government agencies. OTIS oversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies. In this role you will work as a member of the Data Center Infrastructure team to install, configure, maintain, update and troubleshoot servers and server software. You will assist with daily support, configuration and administration of MS Active Directory, BigFix infrastructure servers, and Dell Quest tools. This role will maintain, configure, update and monitor all systems utilizing approved software, conforming to DTO and DIS standards and policies ensuring all procedures and processes will properly secure data, applications, and communications conforming specifically to DTO and DIS security standards, policies and procedures. The position is onsite Columbia, SC.

Responsibilities of the Identity and Access Management Engineer:• Assist with support and administration of MS Active Directory infrastructure to include design, installation, configuration, maintenance, and performance monitoring of underlying server and application software.

• Assist with support and administration of Quest tools, such as Change Auditor, Enterprise Reporter, Active Role Server, Password Manager and administration of IBM BigFix root/relay servers and application.
• Ensure daily administration procedures and processes conform to and are compliant with OTO standards and policies, and all appropriate statutory/regulatory requirements.
• Provide system administration of solutions to meet DIS 200 requirements, such as ObservelT and CyberArk applications and their underlying infrastructure.
• Perform other duties as assigned.

Minimum and Additional Requirements

• A bachelor's degree in communications, business administration, computer science, management information science, or a related field. Relevant experience can be substituted for the bachelor's degree on a year-for-year basis.
• Six (6) years of proven hands-on experience with enterprise information technology architecture including, but not limited to, planning, development, implementation and governance of technologies & services for an enterprise class service provider.

Additional Requirements:• Knowledge of Active Directory and Identity services with emphasis on identity management, privileged Access Management (PAM), and Password management, conditional access policies.

• Knowledge of role-based access control (RBAC), Azure AD, ADFS, configuration management, SSO\SaaS integration and Group Policy management.
• Familiarity with security compliance standards such as CIS\DISA STIG\PUB1075 preferred.
• Ability to establish positive working relationships with technical staff, customers and others involved in server management.
• CJIS Certification is a requirement of this position.
• Position may require overnight travel.
• Position may require employee to work evenings and weekends.
• Position requires on-call shifts and call back.
• Position required to report to work during emergency situations and hazardous weather events.
• This position may require the employee to work from a remote location beyond the standard 37.5 hours/week and could include working nights, weekends, and holidays.

Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.

Preferred Qualifications

• Microsoft Certified Systems Engineer (MCSE) and Microsoft Certified Professional (MCP).
• Strong technical experience with identity and\or configuration management- HCL BigFix and Quest/One Identity Software.
• Experience with automation using Powershell Scripting and\or ServiceNow.

Additional Comments

The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information. Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position. The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:

• Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children. Click here for additional information.
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• S.C. Deferred Compensation Program available(S.C. Deferred Compensation)
• Retirement benefit choices*• State Retirement Plan(SCRS)
• State Optional Retirement Program(State ORP)

*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.