Identity & Access Security Lead (OIM/OIG)

Overview GENERAL DUTIES This position encompasses professional and responsible technical consultative and/or administrative work. Under administrative direction of a university IT manager, with broad latitude of independent action or decision, serves as subject matter expert on IT security, identity, and access infrastructure; provides IT security architectural guidance; designs security solutions; conducts IT risk assessments and recommended mitigating solutions. Assignment Levels There are three (3) Assignment Levels within this classification. All personnel perform related work. Assignment Levels 2 and 3 may supervise staff. This specification describes typical assignments; related duties may be assigned as needed. Key Responsibilities Oversees the architecture and operations of both Production and Non-Production OIM environments, ensuring their optimal performance through rigorous building, testing, and maintenance of interconnected systems. Develops and supports OIM system configurations, resource provisioning, role management, and intricate policy creation to align with organizational security and operational needs. Directs resolution of high-stakes OIM-related application issues, often under time-sensitive conditions during off-hours, to mitigate operational disruptions and maintain system continuity. Leads complex integrations and project rollouts by leading collaborations across IMS, database administrators, security teams, network engineers, and PeopleSoft developers. Communicates with key stakeholders to manage and ensure seamless OIM integration with PeopleSoft and other custom applications critical to university-wide operations. Administers in-depth technical reviews and implements procedural changes to enhance the scalability, security, and reliability of the University’s Enterprise OIM system architecture. Liaises with CUNY's Information Security Office to investigate and resolve intricate managed identity security incidents, safeguarding sensitive university assets. Provides high-level strategic recommendations to rationalize IT services by analyzing and executing decisions to combine, decommission, or expand servers, services, and applications, ensuring cost-effectiveness and scalability. Oversees diverse duties within the scope and intention of the role, requiring adaptability, meticulous planning, and the flexibility to work evenings or weekends for critical systems-related tasks. Minimum Qualifications A baccalaureate degree in computer science, engineering or a related field from an accredited college or university and five (5) years of satisfactory full-time experience providing IT security architectural guidance, designing security solutions, and/or conducting IT risk assessments and recommended mitigating solutions; or A baccalaureate degree from an accredited college or university and six (6) years of satisfactory full-time experience as described in “1” above; or A high school diploma or its educational equivalent and ten (10) years of satisfactory full-time experience as described in “1” above; or Education and/or experience which is equivalent to "1," "2" or "3" above. The following may substitute for some of the required experience required in "1," "2" or "3" above, as follows: College Education (undergraduate Credits) May Substitute For Up To Four (4) Years Of The Required Experience In "3" Above On The Following Basis: 30 to 59.9 semester credits substitute for 1 year of experience; or 60 to 89.9 semester credits substitute for 2 years of experience; or 90 to 119.9 semester credits substitute for 3 years of experience; or 120 or more semester credits substitute for 4 years of experience. Graduate Credits In Information Technology, Computer Science Or a Related Field May Substitute For Up To Two (2) Years Of Experience In "1" Or "2" Above On The Following Basis: 15 to 29.9 graduate credits substitute for 1 year of required experience; or 30 or more graduate credits substitute for 2 years of required experience. Each Of The Following Certifications May Substitute For One (1) Year Of The Required Experience In "1," "2" Or "3" Above: CISSP; CEH; Security+; CISM; CISA; GSEC; CCSP. However, all candidates must have a high school diploma or its educational equivalent and at least three (3) years of experience as described in "1" above. Preferred Qualifications Expertise in Oracle Identity Governance resource provisioning and reconciliation in OIG 12c including OUD, AD, M365, and PeopleSoft; knowledge of OIG orchestration processes is a plus. Experience with integrating Oracle Identity Manager, Oracle Adaptive Access - Manager, and other Oracle IDM solutions. Proficiency with: OIG Java API and development including scheduled tasks, connectors, adapters, and event handlers; WebLogic, UNIX/Linux OS (Red Hat preferred) and LDAP Directory Services (Active Directory and Oracle Internet Directory); familiarity with OIG database schema, PL/SQL queries including indexing and optimization; in-depth technical knowledge of troubleshooting, integration, and migration of OIG; knowledge of Shell, file system, etc., in Unix/Linux environment; experience with Single Sign-On and Web Access, Federated Identity, and Namespace; exceptional analytical and organizational skills; ability to work with multiple teams and adjust priorities as needed. #J-18808-Ljbffr The City University of New York