Enterprise Identity and Access Management (IAM) Architect (Internal Only)

TheEnterprise Identity & Access Management Architect is an expert-level System Administrator for planning designing provisioning implementing configuring troubleshooting and managing DOR Active Directory Domain Services and server infrastructure environments used by Agency staff external Agencies cities counties and Washington state taxpayers.

Work group leader for Enterprise Active Directory Domain Services:

• Guides lower-level staff to maintain proper operation maintenance support and administration of agency-wide mission-critical and highly complex AD Domain Services including but not limited to DNS DHCP GPO management the Agencys Root CA and FTI.
• Assigns tasks to team members and validates that tasks are completed accurately and in a timely manner.
• Provides staff development by instructing and mentoring Journey and senior-level system administrators.
• Assesses the technical capabilities of team members and provides recommendations for team training needs and feedback on employee performance to the supervisor.
• Provides feedback to the supervisor on the performance of the staff the incumbent leads
• Acts as a role model and works with the supervisor in establishing standards and leadership expectations.

• Plans analyzes and leads strategic business initiatives and security mandates for the DOR computing environment. Develops decision packages decision papers technical briefings and maintains professional-level knowledge in network systems on current and upcoming IT trends.
• Leads the design of new IT system implementations with significant DOR interagency and statewide impact.
• Designs configures integrates tests implements and deploys AD Domain Services upgrades and/or new features to keep pace with new technology.
• Develops and maintains system documentation and diagrams necessary to operate and maintain AD Domain services server infrastructure and mitigate non-compliance ensuring standard processes and policies are followed by the staff this position leads.
• Ensures DOR and other regulatory configurations policies standards and guidelines are followed regarding DOR server infrastructure and Federal Taxpayer Information (FTI) environments.
• Participate on committees involved with setting standards and procedures and evaluating software architecture and security needs.

• At the highest technical level independently install test validate deploy upgrade maintain and manage servers infrastructure supporting systems and processes for new and existing server infrastructure applications and information systems to meet Department and other regulatory requirements.

The ideal candidate will possess the following knowledge skills and abilities as well as expert-level knowledge in the following areas:

• Demonstrated progressive experience designing implementing and administering enterprise-level Active Directory Domain Services including DNS DHCP GPO management and Root Certificate Authority gained through recent hands-on work in highly complex Windows server environments.
• Proven ability to lead technical teams by assigning work validating completion mentoring staff and providing performance feedback that improves team performance and technical consistency acquired through prior roles with formal or informal lead or team-guidance responsibilities.
• Demonstrated skill in architecting mission-critical IT systems by planning analyzing designing testing and deploying enterprise infrastructure solutions supported by experience developing technical documentation decision packages and architectural standards.
• Progressive experience independently installing configuring administering and troubleshooting Windows servers and AD-connected infrastructure across test demo and production environments gained through professional system administration roles.
• Demonstrated ability to analyze and resolve highly complex technical issues by capturing and reviewing system logs performing root-cause analysis testing solutions and collaborating with SMEs and interested parties obtained through prior experience supporting mission-critical systems.
• Proven ability to develop and maintain comprehensive technical documentation architecture diagrams and procedures for system operations and compliance supported by past experience producing written materials for technical and non-technical audiences.
• Demonstrated knowledge of regulatory and security requirements including IRS Publication 1075 and OCIO standards gained through experience working with Federal Tax Information (FTI) systems or other environments with strict compliance mandates.
• Progressive experience providing expert-level consultation to executive management project teams SMEs and external agencies regarding infrastructure impacts integration requirements and enterprise architecture decisions.
• Demonstrated ability to plan organize and prioritize multiple work assignments involving competing deadlines by applying strong planning and organizational skills developed through experience in fast-paced IT operational environments.
• Proven ability to communicate complex technical concepts clearly and effectively through both verbal and written communication supported by experience in presenting to project teams developing documentation and collaborating with diverse technical audiences.
• Applied knowledge of enterprise identity and access management principles including user provisioning role-based access controls authentication services authorization models security groups certificate management and directory services administration.
• Demonstrated ability to participate in enterprise governance processes technology review boards standards committees and architecture forums to influence technology direction and ensure alignment with organizational objectives.
• Demonstrated commitment to continuous learning and maintenance of advanced expertise in infrastructure technologies directory services cybersecurity practices regulatory requirements and emerging technology trends.

• The ability to take action to learn and grow:

  • Curious about themselves and others take responsibility for knowing their own strengths and weaknesses and use their learning to make government programs and processes more efficient and effective to serve all in Washington.

• The ability to take action to meet the needs of others:

  • Flexible adaptable customer-service focused and willing and able to empathetically respond to the unique needs of the people they work with and serve.

• Uses an equity & inclusive approach:

  • Actively seeks to understand and appreciate the diverse backgrounds perspectives and experiences of colleagues customers and communities. Encourages an inclusive culture where everyone feels valued and respected. Uses an equity lens that applies an objective perspective to daily work by considering impacts on the people we serve particularly marginalized groups by actively identifying and removing inequitable barriers.

Preference may be granted to those who possess the following:

Bachelors degree in computer science or equivalent AND5 years of recent experience in the administration of Windows server and Active Directory environments; four of those years administering DNS DHCP Root CA authorization and access control.

• Update your online profile in detail as it will be used as your resume.
• Attach a cover letter explaining your interest and qualifications.
• Please include any vendor certifications in specific technologies including Microsoft Certified Professional (MCP) Cisco Certified Network Administrator (CCNA) and/or Microsoft Certified Solutions Expert (MCSE).

• Comply with the FTI background check requirements consisting of:
  • FBI National background check (fingerprinting required)