Identity and Access Management Engineer

Role Overview

The Cybersecurity Operations team is seeking a highly motivated Identity and Access Management (IAM) professional. This role involves performing technical system support and maintenance for corporate-level distributed computing infrastructure. The successful candidate will focus on system design, development, installation, and operation to ensure technology supports current and future business practices. This position is classified as an Enterprise Technology Infrastructure Specialist Journey.

Responsibilities

• Serve on multi-departmental networking projects by planning, designing, and maintaining network infrastructure, including backup and recovery, security architecture, and corporate server complex architecture.
• Identify and define corporate-level network computing projects, functional system requirements, and technical specifications.
• Develop technical standards, procedures, system designs, and user acceptance tests.
• Analyze the need for new hardware and software systems, upgrades, and modifications by evaluating current system effectiveness and performance.
• Conduct feasibility studies and prepare procurement and bid documents.
• Provide technical expertise and leadership on network systems, solving complex design and operational problems using unconventional methods.
• Troubleshoot user obstacles and provide 24-hour on-call support to departments.
• Research project information and conduct work activities in accordance with established task objectives and schedules.

Requirements

• High School diploma or equivalent.
• Three or more (3+) years of progressively responsible relevant work experience in system planning, design, development, testing, and implementation in a network-based computing environment.
• Experience utilizing network topologies and architectures for multi-vendor, multi-protocol networks.
• Certificates in information technology or a products/technology-related field from educational institutions or vendor-certified programs.

Technical Knowledge and Skills

• Knowledge of network design, configuration, and operation, including fundamentals of networking hardware and software.
• Familiarity with network system hardware (Routers, Bridges, Switches, Gateways) and operating systems (Microsoft Windows, Unix).
• Understanding of centralized and distributed computing, multitasking operating systems, and system development life cycles.
• Knowledge of network protocols (TCP/IP, NetBIOS) and topologies (Ethernet).
• Proficiency with troubleshooting tools such as sniffers, RMON, and SNMP.
• Ability to analyze complex issues, develop resolution alternatives, and implement operational improvements.
• Strong communication skills to explain technical issues to non-technical personnel and establish effective working relationships.

Preferred Qualifications

• BA/BS degree from an accredited college or university in Computer Science, MIS, Business Administration, or a related field.
• Five or more (5+) years of relevant work experience.
• Ability to analyze user access requirements and assess IAM risks.
• Experience developing automated identity workflows and integrating services across cloud and on-premises environments.
• Knowledge of Identity, Credential, and Access Management (ICAM) principles and directory services technologies.
• Expertise in PKI, certificate management, and cloud security concepts.
• Knowledge of authentication protocols (Kerberos, LDAP, RADIUS, TACACS) and federation standards (SAML, OAuth, OpenID Connect).
• Skill in implementing Privileged Access Management (PAM) controls and designing role-based (RBAC) or attribute-based (ABAC) access models.

Work Environment and Benefits

Hybrid Work: This position requires working onsite one or more days a week at various locations in the Sacramento region. Reporting requirements may change based on business needs.

Retirement: This is a CalPERS agency position. Eligible employees have access to a defined benefit pension plan along with other retirement and health benefits.

Physical Requirements: Applicants must be able to perform essential job functions with or without reasonable accommodation.