Identity Management Engineer

Title: Sr. Identity Management Integration Engineer Location: REMOTE OPTIONS ARIZONA DEPARTMENT OF ADMINISTRATION Delivering results that matter by providing best in class support services. Sr. Identity Management Integration Engineer Job Location: Arizona Strategic Enterprise Technology (ASET) This position may offer the ability to work remotely, within Arizona, based upon the department's business needs and continual meeting of expected performance measures Main Office Location: 100 N 15th Ave, Suite 302 Phoenix AZ, 85007 Posting Details: Salary: Up to $98,000 Grade: 27 Open Until Business Needs Are Met Job Summary: The Arizona Department of Administration (ADOA), Arizona Strategic Enterprise Technology (ASET) Division is seeking a high-performing Sr. Identity Management Integration Engineer with a deep background in Identity and Access Management (IAM) to drive the State's enterprise security initiatives. In this key role, you will be instrumental in the ongoing design, implementation, and daily operations of a comprehensive single sign-on solution utilized across the State. As a critical member of the technical team, you will focus on sustaining engineering, infrastructure maintenance, and system operations to ensure seamless, secure access for all statewide platforms. Beyond operational stability, you will collaborate closely with agency stakeholders and application owners to architect and deploy custom integration solutions into the core Identity Management framework. Your responsibilities will extend across all facets of infrastructure lifecycle management, including system deployment, proactive performance monitoring, capacity planning, continuous troubleshooting, and direct technical support. If you thrive on optimizing complex IT environments and ensuring enterprise-level reliability, this role offers an exceptional opportunity to shape and strengthen the State of Arizona’s digital infrastructure. The State of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, and commissions, many State employees participate in the State’s Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance. Job Duties: Serve as the primary technical expert for single sign-on (SSO) services, currently utilizing Okta Identity Management alongside emerging future-state technologies. Architect, implement, and maintain the core infrastructure for centralized Identity and Access Management (IAM) systems serving statewide employees, clients, and connected systems. Gather business requirements, analyze existing applications, and evaluate technical implementation options to design, build, and deploy robust SSO solutions. Lead application onboarding projects by installing, configuring, and testing SSO software, system integrations, and enterprise applications. Collaborate with the State's Enterprise Security team to align all IAM operations with Statewide Information Security Policies and Standards. Provide advanced third-level support to resolve complex customer, network, and application access issues while assisting first- and second-level helpdesk teams. Drive continuous process improvement and automation across IAM workflows, policies, and system integrations. Create and maintain accurate process documentation for IAM operations, including cloud implementations across AWS, Azure, and Google Cloud Platform (GCP), to meet regulatory compliance standards. Knowledge, Skills & Abilities (KSAs): Knowledge of: Minimum of 5 years in system integration with 3 years of hands-on experience in systems access/provision and information identity integration. Strong working knowledge of IAM technology and related vendors. Strong working knowledge of OpenID Connect, 2FA/MFA, Active Directory, LDAP, and OAUTH 2.0. Major cloud providers (Amazon Web Services, Microsoft Azure, or Google Cloud). Solid IAM experience with Active Directory, AD, GPO, OU, IIS, and DNS. Solid IAM/OKTA expertise including role management, entitlement, access certification, privileged access controls, user/application provisioning, deprovisioning, RBAC, etc. Thorough understanding of SAML and Integrated Windows Authentication. Administration and operations of production systems in a large-scale environment. Agile implementation frameworks (preferred). Enterprise Identity and Account management life cycles. Cloud SSO & IAM solutions such as Okta (preferred). System administration experience with cloud-based solutions such as G Suite by Google Cloud or Microsoft Azure / Office 365 (preferred). Industry standards and regulations such as PCI, NIST 800-53, HIPAA, FedRAMP, IRS 1075, and ISO27001. Networking knowledge (e.g., DNS, load balancing). Working experience in enterprise application support and Cloud services. Skills in: Excellent communication and organizational skills, with the ability to deliver within strict and often time-sensitive guidelines. Advanced problem-solving skills. Strong customer service skills. Leadership skills. Interpersonal skills. Ability to: Listen for nuances, dig into details to understand systems deeply, and articulate technical details and risks to business leaders. Pay close attention to detail, maintain high accuracy, and work diligently with little supervision. Multi-task effectively. Work collaboratively in teams and across organizations. Quickly learn new platforms, as well as evaluate and test emerging technologies. Provide clear, effective communication regarding technical issues and their impact to management. Apply time management, attention to detail, expectation setting, and organization/coordination skills to provide solid service management. Balance, prioritize, and organize multiple tasks simultaneously. Selective Preference(s): Okta Certification: Okta Certified Administrator, Consultant, or Technical Architect. Cloud Platform Expertise: Hands-on experience architecting and managing IAM implementations within AWS, Microsoft Azure, or Google Cloud Platform (GCP). Protocol Proficiency: Deep understanding of federation protocols and standards such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM. Pre-Employment Requirements: Arizona Driver's License Background and reference check, including state and federal criminal records fingerprint check If this position requires driving or the use of a vehicle as an essential function of the job to conduct State business, then the following requirements apply: Driver’s License Requirements. All newly hired State employees are subject to and must successfully complete the Electronic Employment Eligibility Verification Program (E-Verify). Benefits: The Arizona Department of Administration offers a comprehensive benefits package to include: Sick leave Vacation with 10 paid holidays per year Paid Parental Leave-Up to 12 weeks per year paid leave for newborn or newly-placed foster/adopted child (pilot program) Health and dental insurance Retirement plan Life insurance and long-term disability insurance Optional employee benefits include short-term disability insurance, deferred compensation plans, and supplemental life insurance By providing the option of a full-time or part-time remote work schedule, employees enjoy improved work/life balance, report higher job satisfaction, and are more productive. Remote work is a management option and not an employee entitlement or right. An agency may terminate a remote work agreement at its discretion. Learn more about the Paid Parental Leave program here. For a complete list of benefits provided by The State of Arizona, please visit our benefits page Retirement: Participation in ASRS Lifetime Benefit Pension Plan after 26 weeks of employment. Contact Us: If you have any questions please feel free to contact Christopher Langseth at [apply contact hidden] for assistance. The State of Arizona is an Equal Opportunity/Reasonable Accommodation Employer.