Identity and Access Management (IAM) SME/ Architect

Job Description

The IOP CX identity platform operates on a complex, broad, and continuously expanding set of applications and tools, housed on both cloud infrastructure and SaaS products that the program leverages to build and provide mission critical services to the State and its constituents. Its largest and most complex offering, OHID, serves as an enterprise-grade identity service for all State of Ohio agencies and its constituents. The OHID platform continues to expand its offerings, while in parallel continuing to grow in its agency application and user count, which illuminates the need for identity expertise on the core IOP team.

Identity Governance Advisor

This Is To Achieve Two Goals

As OHID continues to grow and expand on its core services and offerings, it is imperative that the platform formalizes and provides clarity and rigidity around identity governance and standards.

• To ensure that all use of the various OHID services and solutions are leveraged in a safe and consistent way, to prevent operational issues and technical debt.
• To ensure that all development (changes and new functions) are built to IOP and industry standard, ensuring scalability and supportability.

Technical Identity and Access Management (IAM) Subject Matter Expert and Architect

As platform adoption rises, agencies continue to onboard applications and services to the platform at a rapid pace. IOP consistently has multiple identity projects operating in parallel, many of which are technically complex, mission critical, and traverse diverse organizations, both across State agencies and within DAS. This role will provide technical delivery leadership and oversight to these complex and critical projects, to ensure that they are delivered on time and with quality. In addition, this role will serve as an identity advisor and SME to ensure that changes or new additions to the identity platform are designed and developed according to industry and IOP standards.

In addition, this role is expected to assess the current identity technical infrastructure and application architecture to identify gaps, weak points, and inefficiencies in the identity platform. This role would then identify improvements and solutions in an effort to make the identity service offering more efficient, resilient, and redundant in an effort to increase the platform's overall stability and operability in steady state.

IOP is seeking a contractor to serve in this role, as it is extremely difficult for someone with the experience, drive, leadership, and breadth and depth of skill that is required for this multi-faceted role position within the constraints of State employment.

Job Duties

Develops, documents, implements, and enforces technical standards, repeatable processes, and reusable components that can be applied across the various IOP identity service offerings.

Creates, maintains, and enforces IOP Identity Terms of Use, standards, policies, and governance documentation and processes.

Serves as a Technical Delivery Lead/Identity SME on complex and visible projects and engagements that build and deliver solutions across the IOP CX technology stack.

Acts as a liaison between agency customers, stakeholders, vendor project teams, and internal IOP staff to ensure cohesive and effective delivery of the project across all involved organizations.

Provides administrative and logistical support across teams to support project work.

Assists in project planning, including developing/estimating timelines, composition of technical teams, and leveling of resources.

Effectively sets expectations, manages, and monitors vendor/solution integrator teams to ensure that projects are being delivered on track and to an acceptable standard.

Assists in the development and review/quality control of identity technical deliverables and design specification documents.

Ensures that all technical solutions are developed in accordance with IOP and industry best practices and standards.

Provides identity expertise on assessment of the current IOP identity infrastructure and application architecture to identify gaps and weak points. Identifies improvements and solutions in an effort to make the identity service offering more efficient, resilient, and redundant in an effort to increase the platform's overall stability and operability in steady state.

Maintains a 'pulse' on identity industry best practices and standards and applies them to platform standards on a continuous basis.

Mandatory skills

Experience with IAM (identity and access management) concepts and technologies

Experience implementing and supporting IAM tools and processes, ability to communicate effectively across the organization, analytical and problem-solving skills.

Experience establishing, documenting, implementing, and enforcing technology standards and/or policies.

Working knowledge of user provisioning, privileged access management, directory services, multi-factor authentication and single sign-on technologies.

Information security experience in enterprise environments.

Experience with one or more IAM solutions like Sailpoint, BeyondTrust, Okta, Forgerock, CyberArk is required.

Experience with installation, configuration, and administration of Microsoft Active Directory (AD).

Certifications Or Desired Skills If Any Preferred Skills

Experience implementing and supporting IBM Security Verify (ISV) product

Experience With AWS Cloud Infrastructure And Its Services/functions

CISSP certification

API development and integration

Ability to develop code using at least one programming language such as Java, Python, etc