IAM Engineer

IAM Engineer

Texas Department of Public Safety requires the services of 3 Software Developer 3, hereafter referred to as Candidate(s), who meets the general qualifications of Software Developer 3, Applications/Software Development and the specifications outlined in this document for the Texas Department of Public Safety. All work products resulting from the project shall be considered "works made for hire" and are the property of the Texas Department of Public Safety and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Department of Public Safety will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).

Responsibilities:

• The Software Developer III will design, implement and maintain an enterprise Identity and Access Management ecosystem over the life of the contract.
• Implement the architectural design of a centralized identity provider framework using SAML 2.0 and IODC for SSO and MFA; building Joiner, Mover and Leaver lifecycle workflows; onboarding enterprise applications via REST APIs; and implementing Role-Based Access Control models.
• Additional duties will include deploying a privileged access management solution featuring secure credential vaulting, automated password rotation, and just-in-time provisioning. Beyond initial deployment responsibilities, responsibilities extend to long-term system maintenance, including performance tuning, troubleshooting provisioning errors and connection failures, and continuing onboarding of business applications.

Required Skills:

• IAM Platform governance, engineering, lifecycle automation and Scripting Required 8 Years
• Application onboarding, Integrate business applications with IAM systems Required 8 YearsDesigning and implementing RBAC models, enforcing separation of duties and designing certification campaigns Required 8 Years
• Managing Centralized Identity Provider and configuring SSO, MFA Required 5 Years
• Managing centralized identity providers, configuring SSO, MFA and federation protocols Required 5 Years
• SailPoint ISC implementation and operations Preferred 1 Year