Identity and Access Management Engineer (Forgerock)

• Develop, implement, and maintain IAM solutions, including identity provisioning, access control, authentication, and authorization mechanisms using Forgerock.
• Design IAM workflows, policies, and procedures to ensure secure and efficient access management.
• Manage user onboarding, offboarding, and role changes, ensuring adherence to security policies and compliance requirements.
• Automate user provisioning and deprovisioning processes to enhance efficiency.
• Define and enforce access control policies, including role-based access control (RBAC), least privilege principle, and segregation of duties (SoD).
• Conduct periodic access reviews and audits to maintain compliance.
• Stay current with industry best practices, regulations, and compliance standards related to IAM, such as GDPR, HIPAA, and NIST.
• Ensure IAM systems meet all security and compliance requirements.
• Implement and maintain identity federation solutions for single sign-on (SSO) across applications and services.
• Integrate IAM systems with external identity providers (IdPs).
• Respond to IAM-related incidents, investigate security breaches, and perform root cause analysis.
• Troubleshoot and resolve IAM system issues in a timely manner.
• Maintain comprehensive documentation of IAM policies, processes, and configurations.
• Generate reports and metrics related to IAM activities and security posture.
• Collaborate with cross-functional teams, including IT, security, and compliance, to ensure IAM aligns with business goals.
• Communicate IAM-related updates and recommendations to stakeholders.

Experience: Seven years of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software.

Notes:

1. Candidates may substitute graduation from an accredited high school or possession of a high school equivalency certificate and thirty credit hours from an accredited college or university in Computer Science, Computer Technology, Management Information Systems or other information technology-related field to include coursework in application, communication, database or operating systems software technology for four years of the required experience. 

2. Candidates may substitute graduation from an accredited high school or possession of a high school equivalency certificate and one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software for four years of the required experience.

3. Candidates may substitute experience operating computer systems; or scheduling, controlling input and output to process data on computer systems; or evaluating, implementing and maintaining computer hardware and software; or converting data from project specifications by developing program code using generally accepted computer programming languages on a year-for-year basis for a high school education.

4. Candidates may substitute the possession of a Bachelor's degree from an accredited college or university in Computer Science, Computer Information Technology, Management Information Systems or other information technology-related field to include coursework in application, communication, database or operating systems software technology and three years of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software for the required experience.

5. Candidates may substitute U.S. Armed Forces military service experience as a commissioned officer in the Computer Systems Operations classifications or Computer Systems Operations specialty codes in the Information Technology field of work on a year-for-year basis for the required experience.

Contractual employees who work for an agency covered under the State Employee and Retiree Health and Welfare Benefits Program, have a current employment contract and work 30 or more hours a week (or on average 130 hours per month) may be eligible for subsidized health benefits coverage for themselves and their dependents. As a contractual employee, you will be responsible for paying 25% of the premiums for your medical and prescription coverage, including any eligible dependents you have enrolled. The State of Maryland will subsidize the remaining 75% of the cost for these benefits. You can also elect to enroll in dental coverage, accidental death and dismemberment insurance, and life insurance, but will be responsible to pay the full premium for these benefits.

Leave may be granted to a contractual employee who has worked 120 days in a 12 month period. This leave accrues at a rate of one hour for every 30 hours worked, not to exceed 40 hours per calendar year.