Identity and Access Management Engineer

Identity And Access Management Engineer

SMUD's Cybersecurity Team is looking for a highly motivated Identity and Access Management Professional to join our Identity and Access Management Team. This individual should be highly organized and flexible, who can perform their work with a high degree of consistency and strong attention to detail. As a successful candidate, you will demonstrate the ability to adapt to rapidly shifting priorities while providing excellent customer service to internal and external customers.

This classification is comprised of two levels: Level "E" is the entry-level where incumbents are provided formal training and/or certification for progression to the journey-level of the classification. The incumbent is promoted/progressed to the journey level "J" upon successful completion of all training and/or certification requirements for the classification. Incumbents hired at the entry-level are required to successfully progress to the journey-level within 18 to 60 months, depending on the length of the training and/or certification program. If an employee is unsuccessful with progressing to the journey-level they will return to last class held or separate from SMUD.

Duties and Responsibilities Serves on multi-departmental networking computer projects by planning, designing, developing, implementing and maintaining a network infrastructure including backup and recovery, physical and logical network design, network topology, network architecture, security architecture and corporate server complex architecture; assisting in identifying and defining corporate level network computing projects; defining functional system requirements and specifications; developing technical standards and procedures; developing the system design; developing system and user acceptance tests; installing and integrating systems; performing post-implementation reviews; and providing technical consultation and solutions for technical issues.

To support SMUD's strategic information technology goals and direction while ensuring an efficient, stable and secure network infrastructure is available to all SMUD's business units. Analyzes the need for new hardware and software systems, upgrades and modifications by evaluating the effectiveness of the current systems; analyzing networking operating system software and related hardware performance and capacity utilizing software and hardware tools; conducting feasibility studies; defining user and system requirements; preparing procurement and bid documents; designing modifications; addressing integration issues; and implementing new software/ modifications. To ensure SMUD's distributed computing environment meets and serves SMUD's current and future business needs.

Supports the overall effectiveness of the use of the network infrastructure by offering technical expertise and leadership on network systems; providing network consultation; solving a variety of complex networking design, operational and maintenance problems using unconventional methods; troubleshooting user obstacles; and providing 24-hour on call support to departments. To ensure SMUDS's network systems are readily available and accessible to system users.

Assists in planning, reviewing and conducting work activities and researching required project information associated with department internal/external projects in accordance with established task objectives and schedule as outlined in the project plan/contract. To support the overall achievement and completion of department projects.

Performs related duties as required.

Required Education High School diploma or equivalent Required Experience Qualifications Three or more (3+) years of progressively responsible relevant work experience in the areas of system planning, design, development, test, implementation, maintenance in a network based computing environment including utilizing network topologies and architectures for multi-vendor, multi-protocol networks. Required Licenses/Certificates Certificates in information technology and/or a products/technology related field from education institutions or vendor certified programs.

Desirable Education BA/BS degree from an accredited college or university majoring in Computer Science, MIS, Business Administration or related field or equivalent experience. Desirable Qualifications Five or more (5+) years of relevant work experience preferred. Ability to analyze user access requirements. Ability to assess IAM risks and recommend mitigations. Ability to evaluate IAM technologies and solutions. Ability to develop automated identity workflows. Ability to integrate services across cloud and on-premises environments. Knowledge of authentication, authorization, and access control methods. Knowledge of Identity, Credential, and Access Management principles. Knowledge of directory services technologies. Knowledge of PKI and certificate management. Knowledge of cloud security concepts. Knowledge of operating system administration. Knowledge of authentication protocols (Kerberos, LDAP, RADIUS, TACACS). Knowledge of SAML, OAuth, OpenID connect and federation standards. Knowledge of cloud identity providers and IAM architectures. Skill in configuring and administering directory services. Skill in implementing identity and access management solutions. Skill in troubleshooting identity and authentication issues. Skill in integrating cloud and on-premises identity systems. Skill in implementing privileged access management controls. Skill in designing role-based, and attribute-based access models.

Physical Requirements Applicants must be able to perform the essential job functions with or without a reasonable accommodation.

SMUD is a CalPERS agency. As a member of the California Public Employees' Retirement System (CalPERS), SMUD offers eligible employees access to a defined benefit pension plan along with other valuable retirement and health benefits. This program helps provide financial security both during your career and after retirement.