Identity and Access Management (IDM) Administrator

NOTE: This position requires a US citizen or Green Card holder.

The Enterprise Application & Architecture Operational Support Project aims to modernize and transform the DOE’s technology systems to better support its mission of delivering equity and excellence in education. The project’s primary purpose is to improve the efficiency, scalability, security, and sustainability of DOE’s enterprise applications and supporting architecture. By doing so, it ensures that technology can effectively meet the evolving needs of DOE’s vast network of schools, educators, students, and families.

RESPONSIBILITIES

• The IDM Administrator is responsible for designing, implementing, and maintaining identity and access management (IAM) solutions to ensure users have secure access to systems, applications, and data, in line with security policies and regulations. 
• This role manages user accounts, permissions, and roles to ensure efficient and secure access across various systems.

KEY REQUIREMENTS

• 5+ years of experience with IAM systems (e.g., Microsoft Active Directory, Okta, Azure AD) for managing user identities and access controls in both on-premise and cloud environments.
• Knowledge of authentication protocols (e.g., SAML, OAuth) and access control methods (e.g., RBAC, ABAC).
• Experience implementing Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions for secure access.
• Expertise in designing and managing RBAC models to ensure proper access levels for users.
• Proficiency in managing user provisioning, de-provisioning, role assignments, and access reviews.
• Security & Compliance: Understanding of security standards and regulations (e.g., GDPR, HIPAA) to ensure IAM practices meet compliance requirements.
• Ability to resolve identity-related issues quickly to minimize impact on users and systems.
• Experience in automating IAM tasks using tools like PowerShell or Python.
• Knowledge of integrating IAM solutions with enterprise applications and services for unified access management.
• Must hold at list one of the certifications: Certified Information Systems Security Professional (CISSP), Certified Identity and Access Manager (CIAM), Microsoft Certified: Azure Security Engineer, or equivalent IAM certification.