IAM Architect

Preferred hybrid

Job Description:

JOB SUMMARY - Develops and executes design of resilient, mission-critical enterprise systems.  Aligns architectural designs to coincide with Business and Technology strategies and is very influential in gaining commitment from Operations, Development and Service Delivery teams. Partners with the Enterprise Architecture team to ensure technical feasibility of strategies and drives towards excellence.  The IT Architect demonstrates collaboration and inclusiveness through clear verbal and written communications targeting multiple levels of the organization.  Functions with integrity and has an architectural “backbone” but listens to and addresses stakeholder needs.   The IT Architect has a close attention to detail but will also be able to see the larger picture and mitigate impact on technologies and systems that support ERCOT’s mission. Provides design recommendations. Develops enterprise level applications and custom integration solutions including major enhancements, interfaces, functions, and features.

JOB DUTIES

• Lead and coordinate IAM modernization program, including six identified sub-projects.
• Partner with internal teams and stakeholders to align project timelines, deliverables, and compliance requirements (NERC, SOX, ERCOT security policies).
• Provide subject matter expertise on IAM platforms, role/attribute-based access, MFA enforcement, privileged access, and lifecycle management.
• Drive integration of SaaS IAM with on-prem and cloud (Azure AD, Okta, CyberArk, etc.).
• Document standards, procedures, and transition plans.
• Mentor internal staff to ensure sustainable operations post-contract.
• Broadly applies principles, theories and concepts related to the profession. A seasoned, experienced professional with an in-depth/full understanding of area of specialization.
• May provide recommendations regarding issues outside the bounds of defined procedures and practices.   Demonstrates good judgment in selecting methods and techniques for obtaining solutions.
• Wide latitude for decisions within assignments, programs, and projects; impact is generally limited to the project or department.
• Acts as a resource to advise and may at times lead the work of lower level professional and/or support employees.  Generally, represents the department on projects and may perform in a project leadership role.
• Advises, recommends, and justifies critical architecture decisions to management and senior staff

• Directs the development, implementation, and continual use of ERCOT IT standards by leading the EA Working Group
• Seeks out and builds beneficial working relationships to influence technology decisions within IT and with key stakeholders
• Serves as a Subject Matter Expert in one or more domains and provides guidance to others
• May schedule work, train, mentor, and/or coach other employees
• Conveys team goals effectively through strong written and verbal communication skills
• Works on complex issues where analysis of situations requires an in-depth evaluation of variable factors
• Provides expertise regarding the integration of applications across the business
• Develops end-to-end solutions to include people, process and technology
• Acts as an internal consultant, advocate, mentor and change agent

EXPERIENCE

• Requires minimum 8 years related work experience in excess of degree requirements
• Requires experience developing and delivering on Architecture and designs for Identity solutions
• Preferred experience working with Oracle Identity Management suite
• Requires experience working with Active Directory, Single-Sign On (SSO), Identity as a Service (IDaaS), Azure AD and Federated Identities
• Preferred experience with Identity governance, Delegated administration, PKI Infrastructure, Certification Authorities, Digital Signatures and API gateways
• Requires Intermediate knowledge of development and scripting concepts

• Preferred experience in using a metamodel-based architecture tool (Sparx EA, Orbus iServer, MEGA Hopex, Rational System Architect)
• Required previous experience delivering multiple end-to-end solutions and has provided oversight for these solutions through the entire lifecycle – inception, planning, design, implementation, operational turnover, patch/maintenance, decommissioning

PREFERRED SKILLS

• Strong understanding of IAM concepts, including authentication, authorization, identity governance, and privileged access management.
• Experience with various IAM technologies and platforms (e.g., Okta, SailPoint, CyberArk, Microsoft Entra).
• Proficiency in directory services (e.g., Active Directory, Azure AD).
• Knowledge of single sign-on (SSO), multi-factor authentication (MFA), and conditional access.
• Experience with cloud IAM solutions.
• Strong communication and interpersonal skills.
• Ability to work effectively with both technical and non-technical stakeholders.

CERTIFICATIONS

• TOGAF (preferred)
• CISSP (preferred)

EDUCATION

• Bachelor's Degree: Computer Science, MIS or related field (Required)
• Master's Degree: Computer Science, MIS or related field (Preferred)
• or a combination of education and experience that provides equivalent knowledge to a major in such fields is required