PRINCIPAL IAM ENGINEER (9976) Department of Technology

IAM Engineer reports to the Director of IAM & Directory services and will be responsible for the development deployment administration and maintenance of Oracle Identity and Access Management (IAM) security solutions and programs.  The incumbent will have rich experience in Java J2EE cloud services hybrid cloud access management responsibilities and Privileged Access Management experience along with continual monitoring of the IAM service for quality levels including performance and outage issues coordinating with System Administrators Database Administrators Information Security and system owners to architect deploy and maintain IAM tools and solutions. The position requires a detail-oriented self-motivated degreed professional with experience supporting Identity Access Management Systems including Oracle Access Manager and Oracle Identity Management 11gR2/12c/Identity Cloud Services.

Position Duties:

Identity & Access Management (IAM) Engineer will contribute to the overall strategy planning evaluation & implementation of the entire Identity/Access Management stack and supervise and help junior engineers. The individual in this role will significantly contribute to the direction and oversight into the IAM functions across the City and County including areas such as developing centralized provisioning IAM engine to all Citywide Enterprise Applications workflow and review certification Audit and Compliance Hybrid cloud management Privileged Access Management Authentication & Authorization. This position will require expert knowledge in Oracle Fusion Middleware Oracle Identity & Access Management administration Identity cloud services WebLogic administration custom connector development installation and configuration performance tuning backup and recovery methods in multiple computing environments and must be well versed in J2EE Service Oriented Architecture (SOA) Web Services LDAP XML and SAML. This position also requires knowledge of Oracle databases and should be able to support other areas or functions as needed.

Working Relationships:

The role reports to the Director of IAM & Directory services and will be responsible for documenting designing and administering the IAM infrastructure.  The position will provide support to security functions and develop appropriate audit controls and procedures to ensure the integrity of applications. The engineer will be working closely with the project managers Security and Compliance personnel application developers and other administrators in creating functional scalable and secure applications from design and development through implementation for business clients.

Qualifications :

Education:  Possession of an Associates degree in Computer Science or related field from an accredited college or university OR its equivalent in terms of total course credits/units i.e. at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field.

AND

Experience:  Five (5) years of experience in Identity and Access Management.

Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/ forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field.

AND

Ability to pass CJIS background check

Desirable Qualifications:

• 3 plus years of other cloud Identity product experiences from the below products
• Access Governance Experience
• SailPoint Experience
• Savyant exeprience

Note:  Applicants must meet the minimum qualification requirement by the final filing date unless otherwise noted. 

One-year full-time employment is considered equivalent to 2000 hours (2000 hours of qualifying work experience is based on a 40hour work week). Any overtime hours that you work above forty (40) hours per week are not included in the calculation to determine full-time employment. 

Additional Information :

• Information About the Hiring Process 

• Conviction History 

• Employee Benefits Overview 

• Equal Employment Opportunity 

• Disaster Service Worker 

• ADA Accommodation 

• Veterans Preference 

• Seniority Credit i

• Right to Work 

• Copies of Application Documents 

• Diversity Statement 

Applicants will receive a confirmation email from  that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received. 

Applicants may be contacted by email about this recruitment and therefore it is their responsibility to ensure that their registered email address is accurate and kept up-to-date. Also applicants must ensure that email from CCSF is not blocked on their computer by a spam filter. To prevent blocking applicants should set up their email to accept CCSF mail from the following addresses (@ @ @ @ @ @ @ @ @ @ @ @ @ @ and @). 

Exam Analyst Information:If you have any questions regarding this recruitment or application process please contact the analyst at 

The City and County of San Francisco encourages women minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex race age religion color national origin ancestry physical disability mental disability medical condition (associated with cancer a history of cancer or genetic characteristics) HIV/AIDS status genetic information marital status sexual orientation gender gender identity gender expression military and veteran status or other protected category under the law.

Remote Work :

No

Employment Type :

Full-time