Identity Access Management (IAM) Architect

Quincy, MA, United States

Position Overview:

Client is seeking to hire an Identity Access Management (IAM) Architect to join the Client Technology Office and assist with strategic planning and tactical implementation of our next generation Enterprise-wide IAM solution across a majority of Client internal and client-facing applications. The IAM Architect will be responsible for providing architectural and technical solution support and to work on modernizing the IAM solution to fall within the Executive Office of Technology Services and Security guidelines. The incumbent will also collaborate with business stakeholders and application development teams from multiple Client agencies to implement a standard based secure IAM solution.

Detailed List of Job Duties and Responsibilities: Provide technical leadership in IAM technologies, architectures, and solutions.

Collaborate with business stakeholders and application development teams from multiple Client agencies to define, architect, and implement a standard based secure IAM solution that is scalable, robust, and performant while fulfilling business requirements and the Commonwealth of Massachusetts' security guidelines.

Architect solutions for new and more dynamic environments with Agile, DevOps, containers, microservices, stateless architectures, and APIs

Document and present technical architecture and design with a focus on architectural standards, growth, performance, flexibility, reliability, scalability, and security.

Develop detailed plans and execution in security administration to meet the needs of applications hosting PII and PHI data sets.

Define, plan, and design innovative Identity Management solutions to meet the needs of B2B and B2C segments of IAM.

Lead technical efforts between teams to proactively resolve issues with applications, performance, infrastructure, and configurations while serving as a final escalation point for IAM tools while providing and maintaining accurate documentation.

Ensure a strong understanding of IAM best practices and requirements by building strong relationships and proactively engaging to safely maintain and track access.

Develop seamless and transparent migration strategies from legacy IAM integrations with minimal impact to business processes, workflows, and user communities.

Oversee new developments and life-cycle management of the services related to Identity Governance and Administration services.

Identify, implement, and improve current processes by identifying gaps and recommending/delivering changes and enhancements to support controls, data quality, security risk reduction, scalability, efficiency, and regulatory compliance.

Partner with application owners and leaders to address business and technical issues involved in deploying, governing, and extending identity services.

Qualifications: Preferred Knowledge, Skills, and Abilities: Two (2) years of experience as an IAM Architect using modern enterprise authentication and access management technologies.

Four (4) years of experience as a lead IAM Developer for large scale enterprise applications

Eight (8) years of IT experience providing solutions and integrations in a large technology enterprise environment.

Professional experience in the healthcare domain preferred

Proven hands-on experience with developing/architecting solutions using two or more leading IAM Solution providers such as Azure AD, Oracle OAIM, and ForgeRock

Demonstrated experience with performance management and capacity planning for large scale enterprise applications.

Thorough understanding of modern enterprise architecture and hands-on experience with Enterprise Application frameworks

Excellent knowledge of authentication protocols such as SAML, OpenID Connect, OAuth, MFA, and Risk Based Authentication

Ability to translate business strategies and project portfolios into short and long-term architectural plans, detailed requirements, and models.

Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance

Ability to comprehend and leverage the functions and capabilities of new technologies.

Ability to create estimations of time and resource requirements for different activities and determine which activities can be completed in parallel and in sequence.

Methodical and able to follow documented procedures and instructions.

Ability to keep meticulous and consistent documentation of processes, architecture, and solutions.

Strong multitasking and time management skills with the ability to prioritize effectively and efficiently.

Excellent problem-solving and analytical skills, with the ability to independently analyze reported issues, document, and recommend solutions.

Ability to collaboratively work with technical and non-technical staff, as well as upper management.

Excellent communication and writing skills with the ability to clearly communicate technical concepts to both technical and non-technical audiences across all levels of an organization.

Education and Experience: Bachelor's degree in computer science, Information Technology, or related field or equivalent work experience

Cyber Security Certification preferred.

CISSP, CISM, or equivalent certification preferred.