Systems Administrator - Identity Access Management (IAM) Systems

System AdministratorThe System Administrator will collaborate with our current full-time subject matter experts (SMEs) to acquire critical institutional knowledge of our systems, processes, roles, and access levels. This knowledge is essential for transitioning to our new automated provisioning system and will significantly contribute to the project's success.A comprehensive understanding of our existing environment will help streamline our future automated process and provisioning plan creations, including identity details, account requests, attribute requests, and knowledge of all native identifiers, as well as necessary knowledge of the potential information that will need to be reported for internal and external audits.The ideal candidate should thoroughly understand the consultant role and demonstrate exceptional communication skills, ensuring respectful, professional, and clear interactions. Communications should be direct and easily comprehensible, with the ability to convey ideas and strategies effectively to all stakeholders. We seek a confident individual who can provide actionable recommendations to drive results while maintaining a professional, solution-focused approach in all interactions.The duties and responsibilities of this position are as follows:Manage user accounts as follows. Perform onboarding, offboarding, and ongoing changes to user access across various systems and applications;Monitor the user account management workflow and track agency performance against service level agreement metrics;Ensure proper permissions are granted, changed, or revoked based on user job functions and employment status; andManage user attributes, roles for access control, and user profile information.Configure and maintain access control tools as follows. Define and assign user roles according to job functions, employment status, and security standards;Manage access policies and entitlements for applications and resources; andImplement role-based access control (RBAC) and attribute-based access control (ABAC) mechanisms.Create and maintain dashboards with metrics as follows. Design and create user-specific dashboards tailored to user roles and business needs, selecting relevant metrics and visualizations;Set up data filters and views to focus on critical access control information;Analyze data trends to identify patterns and potential issues related to access control; andIdentify areas for process improvement based on data insights.Perform technical troubleshooting as follows. Provide ongoing user support by addressing and resolving provisioning and access management issues; andIdentify IT resource access errors and investigate incidents of unauthorized access.Perform reporting and auditing as follows. Run user access reports to ensure compliance with procedures and compliance standards;Prepare audit trails that track a history of IT resource access success and failure; andPerform periodic reviews of IT resource access and validate user entitlements.Collaborate and communicate with team members and end users as follows. Collaborate with the Information Security team to implement security procedures related to user access and promptly alert the team to suspicious activity or non-compliant activity;Coordinate with agency IT teams to ensure smooth integration with other systems;Provide group and individual training on identity management processes;Provide on-going support to end users on identity management processes; andCommunicate technical concepts clearly to both technical and non-technical stakeholders.NOTE: This position is designated as “essential staff” and is expected to report for duty when instructed to do so in times of emergency or potential emergency as required by Section 33-208.002(4), F.A.C.Work Location - The work will be conducted on-site in Tallahassee, Florida.Requirements/QualificationsRequired QualificationsA bachelor’s or master’s degree from an accredited college or university in Computer Science, Information Systems, or a related field is required. Alternatively, four (4) years of equivalent work experience can be substituted for the educational requirement. Relevant experience may be substituted for education on a year-for-year basis when applicable.The Department requires the following experience, skills, and/or knowledge for this position:At least three (3) years of experience working with IAM systems, including Okta, SailPoint, Microsoft Identity Manager, or other IAM solutions;Proficient in managing roles, user permissions, and access across various applications and environments;Experienced in monitoring system health, reviewing logs, and troubleshooting access issues as they arise;Knowledgeable about security technologies such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and the principles of least privilege;Expertise in compliance standards and how access management integrates with compliance reporting and auditing processes;Ability to work collaboratively in a team environment, demonstrating strong listening skills, and contributing effectively; andProficient in communicating clearly with both technical and non-technical stakeholders, especially concerning permissions required to access IT resources, matching user job functions with predefined access roles, and compliance with agency procedures and compliance standards.NOTE: In addition to the above list, the selected Candidate must successfully complete a Level II Background Check.Preferred QualificationsThe Department prefers the Candidate to have the following experience, skills, and/or knowledge for this position:Proficient in using request management and ticketing systems (e.g., ServiceNow preferred);Knowledge of security best practices, compliance regulations, and potential threats to user identities;Able to express ideas and opinions with clarity, while ensuring approachability and encouraging open communication; andAbility to constructively challenge ideas and opinions with respect and professionalism.