Identity Governance Engineer and Architect - Department of Technology (9976)

Identity Governance Engineer and Architect - Department of Technology (9976)

• Full-time
• Work Hours: Regular
• Job Code and Title: 9976-Technology Expert I

Applicants must complete the supplemental questionnaire. The application will not be reviewed without a completed supplemental questionnaire.

Why Work for the Department of Technology (DT)? DT is the centralized technology services provider in the City and County of San Francisco (CCSF). We deliver technology infrastructure and services to approximately 33,000 employees! With an annual operating budget of over $140M and approximately 260 employees, DT provides a host of services that range from Public Safety radio and wiring to Enterprise Support and the Cloud.

Benefits of Working for CCSF: In addition to challenging and rewarding work, the City provides a generous suite of benefits to its employees.

• Job security , pension, and robust retirement options
• Competitive pay with consistent bi-yearly or yearly increases
• Hybrid Work with a minimum of 20% of time spent in our office in San Francisco, California for all IT-related roles
• Generous paid time off , family leave, and more!
• Diverse work environment in a diverse city
• Union protections and representation
• Career development and growth — move between departments, learn on the job, or take subsidized/reimbursed classes!

Position Responsibilities

The Identity & Access Management (IAM) Engineer will contribute to the overall strategy, planning, evaluation & implementation of the entire Identity/Access Management stack. The individual in this role will significantly contribute to the direction and oversight into the IAM functions across the City and County, including areas such as developing centralized provisioning IAM engine to all Citywide Enterprise Applications, workflow and review certification, Audit and Compliance, Hybrid cloud management, Privileged Access Management, Authentication & Authorization. This position will require expert knowledge in Oracle Fusion Middleware, Oracle Identity & Access Management administration, Identity cloud services, WebLogic administration, custom connector development, installation and configuration, performance tuning, backup, and recovery methods in multiple computing environments and must be well versed in J2EE, Service Oriented Architecture (SOA), Web Services, LDAP, XML, and SAML. This position also requires knowledge of Oracle databases and should be able to support other areas or functions as needed.

Job Type: This Permanent Exempt - Full Time position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. The anticipated duration of this project position is thirty-six (36) months and will not result in an eligible list or permanent civil service hiring.

Nature of Work: Incumbent must be willing to work a 40-hour week as determined by the department. Travel within San Francisco may be required.

The incumbent must be a resident of the State of California or be willing to relocate within 4 weeks of beginning employment with the City and County of San Francisco.

The City and County of San Francisco does not sponsor visas. All applicants must be able to demonstrate that they are legally able to work in the United States without visa sponsorship by the employer.

Work Location: Incumbent will conduct the majority of work at the Department of Technology, 1 south Van Ness in San Francisco . However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary.

This position does not support fully remote work. Employees may be permitted to work a hybrid schedule with supervisor approval, after which they must work at least two days in the office every two weeks.

Education: An associate degree in computer science, computer engineering, information systems, or a closely related field from an accredited college or university OR its equivalent in terms of total course credits/units.

Experience: Five (5) years of experience in Identity and Access Management.

License and Certification: Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years).

Desired Qualifications:

• 5 years of progressive hands-on experience in design, architecture and administration of Identity and Access Management solutions using Oracle Identity and Access Management suite
• 5 years of experience in configuring automated user provisioning and access management
• 5 years of experience in SOA, BPEL workflow configuration and management
• 5 years of experience in Spring, Struts, App servers, jQuery, Hibernate
• 5 years of experience in SOAP and RESTful framework
• 5 years of experience in Federation, SAML, OpenID, OAuth, and other industry-standard authentication/authorization solutions
• 5 years' experience in Oracle Database and Linux operating systems
• 5 plus years' experience in using Eclipse, JDeveloper, Maven
• Experience in troubleshooting issues and quickly resolve them in an efficient manner that minimizes downtime
• Experience with Windows, Linux, and Unix Operating Systems
• Ability to perform job functions with considerable independence and judgment
• Well organized with excellent written and verbal communications skills
• Hands on experience in Identity cloud services and OCI
• Hands on experience in Jenkins, GitHub, Service Now
• Knowledge of vulnerability assessments and penetration tests
• Knowledge of industry-standard frameworks – NIST, ISO, HIPAA, PCI

Applicants must meet the minimum qualification requirement by the final filing date unless otherwise noted.

Compensation: $76.7750-$96.5625 hourly / $159,692-$200,850 annually

How to Apply:

• Applicants are encouraged to apply immediately as this recruitment may close at any time, but not before September 27, 2024 at 11:59 PM.
  • Your application MUST include a resume. To upload, please attach using the "additional attachments" function.
  • In addition to submitting your application, you MUST submit this supplemental questionnaire:

Late or incomplete submissions will not be considered. Mailed, hand-delivered or faxed documents/applications will not be accepted.

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.