Hybrid Identity Access Management (IAM) Architect at The Computer Merchant, LTD.

Quincy, MA 02171

About the Job

JOB TITLE: Hybrid Identity Access Management (IAM) Architect
JOB LOCATION: Some time onsite in Quincy MA
WAGE RANGE*: $80hr to $86hr
JOB NUMBER: 24-00844

REQUIRED EXPERIENCE:
IAM
SAML
Integrations

JOB DESCRIPTION

Our client is seeking to hire an Identity Access Management (IAM) Architect to join the EOHHS Technology Office and assist with strategic planning and tactical implementation of our next generation Enterprise-wide IAM solution across a majority of EOHHS internal and client-facing applications. The IAM Architect will be responsible for providing architectural and technical solution support and to work on modernizing the IAM solution to fall within the Executive Office of Technology Services and Security (EOTSS) guidelines. The incumbent will also collaborate with business stakeholders and application development teams from multiple EOHHS agencies to implement a standard based secure IAM solution.

The primary work location for this role will be 100 Hancock Street, Quincy, Massachusetts 02171. The work schedule for this position is Monday through Friday, 9:00AM to 5:00PM EST.

This position will follow a hybrid model of reporting that combines in-office workdays and work from home days as needed. This position is expected to provide occasional after-hours support as authorized and required.

DETAILED LIST OF JOB DUTIES AND RESPONSIBILITIES:

Provide technical leadership in IAM technologies, architectures, and solutions.
Collaborate with business stakeholders and application development teams from multiple EOHHS agencies to define, architect, and implement a standard based secure IAM solution that is scalable, robust, and performant while fulfilling business requirements and the Commonwealth of Massachusetts' security guidelines.
Architect solutions for new and more dynamic environments with Agile, DevOps, containers, microservices, stateless architectures, and APIs
Document and present technical architecture and design with a focus on architectural standards, growth, performance, flexibility, reliability, scalability, and security.
Develop detailed plans and execution in security administration to meet the needs of applications hosting PII and PHI data sets.
Define, plan, and design innovative Identity Management solutions to meet the needs of B2B and B2C segments of IAM.
Lead technical efforts between teams to proactively resolve issues with applications, performance, infrastructure, and configurations while serving as a final escalation point for IAM tools while providing and maintaining accurate documentation.
Ensure a strong understanding of IAM best practices and requirements by building strong relationships and proactively engaging to safely maintain and track access
Develop seamless and transparent migration strategies from legacy IAM integrations with minimal impact to business processes, workflows, and user communities.
Oversee new developments and life-cycle management of the services related to Identity Governance and Administration services.
Identify, implement, and improve current processes by identifying gaps and recommending/delivering changes and enhancements to support controls, data quality, security risk reduction, scalability, efficiency, and regulatory compliance.
Partner with application owners and leaders to address business and technical issues involved in deploying, governing, and extending identity services.

QUALIFICATIONS: Preferred Knowledge, Skills, and Abilities:

Two (2) years of experience as an IAM Architect using modern enterprise authentication and access management technologies.
Four (4) years of experience as a lead IAM Developer for large scale enterprise applications
Eight (8) years of IT experience providing solutions and integrations in a large technology enterprise environment.
Professional experience in the healthcare domain preferred
Proven hands-on experience with developing/architecting solutions using two or more leading IAM Solution providers such as Azure AD, Oracle OAIM, and ForgeRock
Demonstrated experience with performance management and capacity planning for large scale enterprise applications.
Thorough understanding of modern enterprise architecture and hands-on experience with Enterprise Application frameworks
Excellent knowledge of authentication protocols such as SAML, OpenID Connect, OAuth, MFA, and Risk Based Authentication
Ability to translate business strategies and project portfolios into short and long-term architectural plans, detailed requirements, and models.
Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance
Ability to comprehend and leverage the functions and capabilities of new technologies.
Ability to create estimations of time and resource requirements for different activities and determine which activities can be completed in parallel and in sequence.

Methodical and able to follow documented procedures and instructions.
Ability to keep meticulous and consistent documentation of processes, architecture, and solutions.
Strong multitasking and time management skills with the ability to prioritize effectively and efficiently.
Excellent problem-solving and analytical skills, with the ability to independently analyze reported issues, document, and recommend solutions.
Ability to collaboratively work with technical and non-technical staff, as well as upper management.
Excellent communication and writing skills with the ability to clearly communicate technical concepts to both technical and non-technical audiences across all levels of an organization.

EDUCATION AND EXPERIENCE:

Bachelor's degree in computer science, Information Technology, or related field or equivalent work experience
Cyber Security Certification preferred.
CISSP, CISM, or equivalent certification preferred.

Equal Opportunity Employer Veterans/Disabled

* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions.