Job Opening: Identity Access Administrator
Department: Information Technology
Posting Date: August 3, 2022
Weekly Hours: 40.00
Shift: 8:30 am to 5:00pm, extended hours as needed
The Identity Access Administrator (IAA) is responsible for managing all accounts, groups, and roles within IT systems (on premises and cloud based) for the County of Delaware. The IAA provides technical expertise and coordination in the lifecycle of access controls that support and secure institutional business and applications. This role includes the creation of policies, profiles, and groups to control access and functions based on least privilege methodology. The IAA will respond to tickets in the support of users related to access, account, password, and MFA issues. Along with ongoing support, the position will work with County and Court departments on new projects to ensure that proper access control security standards are adhered too while creating a function login process. The IAA has the unique opportunity to develop the IAM process to a maturity model which includes documented processes and the selection of an IAM tool.
Additional responsibilities include reporting, metrics, user data consolidation, scripting, and end-user training.
The Identity Access Administrator will utilize their experience in access controls, resource provisioning, and authentication and authorization procedures to facilitate identity access management within our current environment. The identity access administrator will work to integrate AD LDAP user information with HCM ERS information to allow for a single system of record for user account information. The identity access administrator will also be responsible for day-to-day support, troubleshooting, and changes related to user accounts access, and participation on project teams as needed. The IAA will document all procedures, create reports as needed, track tickets assigned to them, and record permission approvals. This position will be performed on-site at the government center. Experience with Azure portal, Office365 portal, ADUC, GPM, Windows file share management, SaaS SSO management, PowerShell or other script tools a must. Deep understanding of nested groups, GPO creation, local windows policies, MFA, SAP authentication, and cloud account integration a big plus.
Under the general direction of IT security, the IAA will:
Administer Active Directory user access including provisioning, decommissioning and role transfers
Administer user accounts for County applications on premises and SaaS.
Administer file shares and user permissions
Administer Microsoft Office365 distribution groups, accounts and policies
Assist users and IT operations in troubleshooting access, MFA, and password changes
Perform user administration of Active Directory in cooperation with IT Operations
Assist analysts, designers and system owners in the testing of new access
Refine and automate regular processes, track issues and document changes
Work with third party vendors to resolve support issues as needed
Perform tasks as assigned to meet any audit requests
Share technical expertise, provide technical mentorship and cross-training to peers and team members
Document all routine procedures
Create and implement an IAM standard for the County, in both process and tool selection
Perform other duties and project work as assigned
At least 3 years of experience in Information Technology or related access control area
Experience with SaaS account management either direct or SSO
Experience with cloud technologies such as Azure and Office365 administration
Proficient with Windows shares and Active Directory users and computers
Ability to deploy and troubleshoot accounts, groups, policies, GPOs, and OU structures
Proficient with Powershell and automation scripting, creating and administering
Experience with password policy and MFA administration
Excellent written and verbal communication
Knowledge of least privilege methodology
Willing to learn and grow knowledge in the area of data and access security principals
Residence Requirement: The County of Delaware has a residency requirement for employees. Anyone applying for this job must reside in Delaware County or be willing to move to the County within six months of starting employment.
To apply, please fill out our online application form.