Information Security Administrator

Information Security Administrator – Office of the New York State Attorney General – Latham, NY Vacancy ID: 204592 Status: Permanent Non-competitive Bureau: Information Technology Salary Grade (SG): PEF SG23 ($86,681-$109,650) Base Pay Range $86,681.00/yr – $109,650.00/yr How to Apply Send your resume, cover letter, and a copy of your degree/transcript (if applicable) to View email address on click.appcast.io. Include Vacancy ID #204592 and the position title in the email subject. Duties Lead the development and implementation of the IAM strategy aligned with business objectives and regulatory requirements in conjunction with security policy. Support design and documentation for IAM architecture, identity governance, and role-based access control. Manage security operations tasks related to identity and access management, including incident response recommended solutions. Identify and rectify gaps within current infrastructure as it relates to onboarding and offboarding personnel. Ensure IAM processes comply with industry standards (NIST, ISO, CIS) and internal policies developed by the CISO and SecOps teams. Conduct regular audits and assessments to identify vulnerabilities and ensure compliance. Assess current applications and architecture to ensure implementations align with identity-first security strategies, best practices, and approved standards. Define integration methodologies for IAM solutions with existing and onboarding applications, including cloud services, on-prem systems, and third‑party applications (Entra ID, Azure, on‑prem Active Directory, Oracle Identity Manager). Work closely with other teams within the IT bureau (O365, Windows, Linux, EA, etc.) to ensure fluid cohesiveness. Other duties as assigned. Minimum Qualifications Bachelor’s degree with at least 15 credit hours in cyber security, information assurance, or information technology; and two years of information technology experience, at least one year of which is information security or information assurance experience. A bachelor’s degree in any field with at least three years of information technology experience, at least one year of which is information security or information assurance experience. An associate's degree in any field with five years of general information technology experience at least one of which is information security or information assurance experience. At least seven years of information security or information assurance experience. Preferred Qualifications 2+ years of dedicated identity and access management experience with multi‑environment experience (Oracle Identity + Microsoft) a plus. 5+ years of information technology administration experience or equivalent combination of work and educational experiences. Intermediate to advanced knowledge of identity technologies and concepts. Intermediate to advanced knowledge of directories, Single-Sign On (SSO), identity federation, privileged access management, automated life‑cycle management. Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+). Understanding in application integration patterns and API‑based access control. Understanding of Microsoft Entra ID hardening, role‑based access control, active directory attributes and privileged identity management. Experience with Microsoft Entra ID by configuring and maintaining Conditional Access policies, enforcing MFA, and securing authentication methods to reduce identity‑related risks. Experience implementing controls, identity lifecycle management and third‑party integrations for automation using Microsoft Entra ID Governance. Strong familiarity with administering and maintaining Role‑Based Access Control (RBAC) in Microsoft Entra ID, including the creation of custom roles, access reviews, and ensuring alignment with least‑privilege principles. Ability to leverage Active Directory and Entra ID user attributes to automate access provisioning and group memberships using dynamic group rules. Skilled in supporting Privileged Identity Management (PIM) by configuring just‑in‑time access to critical roles, implementing approval workflows, and conducting periodic access reviews. Employment Information Seniority Level: Associate Employment Type: Full‑time Job Function: Information Technology Industry: Law Practice EEO Statement Candidates from diverse backgrounds are encouraged to apply. The OAG is an equal opportunity employer and is committed to workplace diversity. The Office of the NYS Attorney General (OAG) cannot provide sponsorship for work authorization. Candidates must be authorized to work in the United States to be employed by this agency. Employees must continue to maintain work authorization for the duration of their employment. This agency does not participate in E‑Verify for work authorization purposes. #J-18808-Ljbffr