Application Support / Developer III

Commonwealth of Massachusetts•Quincy, MA

5d•Hybrid

About The Position

Commonwealth’s Executive Office of Health and Human Services (EOHHS) is looking for an Application Support/Developer to assist with strategic planning and tactical implementation of our next-generation enterprise-wide IAM solution across a majority of EOHHS internal and client-facing applications. This role is required to lead and support both the strategic planning and tactical implementation of the next-generation enterprise-wide Identity and Access Management (IAM) solution across the majority of EOHHS internal and client-facing applications. The position will provide architectural leadership and technical solution support to modernize IAM capabilities in alignment with Executive Office of Technology Services and Security (EOTSS) and Executive Office of Health and Human Services (EOHHS) standards, policies, and security guidelines. In addition, the role will collaborate closely with business stakeholders and application development teams across multiple EOHHS agencies to design and implement a standardized, secure, and scalable IAM framework that enhances interoperability, strengthens security, and improves user access management across the enterprise.

Requirements

Applicants must have (A) at least three (3) years of full-time or equivalent part-time professional or practical experience in the field of information technology application development and support, or (B) any equivalent combination of the required experience and the substitutions below.
An Associate’s degree in a related field may substitute for one (1) year of the required experience.
A Bachelor’s degree or higher in a related field may substitute for two (2) years of the required experience.
A Master’s degree or higher in a related field may substitute for the required experience.

Nice To Haves

Minimum of eight (8) years of overall IT experience delivering enterprise-scale solutions and integrations with minimum Four (4) years of experience as an IAM Architect using modern enterprise authentication and access management technologies in a large technology enterprise environment.
Four (4) years of experience as a lead IAM Developer for large scale enterprise applications
Professional experience in the healthcare domain preferred
Proven hands-on experience with developing/architecting solutions using two or more leading IAM Solution providers such as Azure, Oracle, ForgeRock and Ping.
Demonstrated experience with performance management and capacity planning for large scale enterprise applications
Thorough understanding of modern enterprise architecture and hands-on experience with Enterprise Application frameworks
Excellent knowledge of authentication protocols such as SAML, OpenID Connect, OAuth, MFA, and Risk Based Authentication
Ability to translate business strategies and project portfolios into short and long-term architectural plans, detailed requirements, and models
Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance
Ability to comprehend and leverage the functions and capabilities of new technologies
Ability to create estimations of time and resource requirements for different activities and determine which activities can be completed in parallel and in sequence
Methodical and able to follow documented procedures and instructions
Ability to keep meticulous and consistent documentation of processes, architecture, and solutions
Strong multitasking and time management skills with the ability to prioritize effectively and efficiently
Excellent problem-solving and analytical skills, with the ability to independently analyze reported issues, document, and recommend solutions
Ability to collaboratively work with technical and non-technical staff, as well as upper management
Excellent communication and writing skills with the ability to clearly communicate technical concepts to both technical and non-technical audiences across all levels of an organization
Hands-on experience with the Oracle AIMS technology stack.
Working knowledge of Ping Identity products.
Acquiring familiarity with Azure Active Directory.
Develop and transfer existing reports from Oracle BI Publisher by using technologies to new IAM solution using AWS and Ping ForgeRock products
Hands-on experience securing web services through external gateways and channels.
Architected and deployed enterprise identity and access management solutions to provide authentication, authorization, and single sign-on across cloud and on-premises applications.

Responsibilities

Provide technical leadership in IAM technologies, architecture, and solutions.
Collaborate with business stakeholders and application development teams from multiple EOHHS agencies to define, architect, and implement a standard based secure IAM solution that is scalable, robust, and performant while fulfilling business requirements and the Commonwealth of Massachusetts’ security guidelines.
Architect solutions for new and more dynamic environments with Agile, DevOps, containers, microservices, stateless architectures, and APIs.
Document and present technical architecture and design with a focus on architectural standards, growth, performance, flexibility, reliability, scalability, and security.
Develop detailed plans and execution in security administration to meet the needs of applications hosting Personal Identifiable Information (PII) and Personal Health Information (PHI) data sets.
Define, plan, and design innovative Identity Management solutions to meet the needs of Business to Business (B2B) and Business to Customer (B2C) segments of IAM.
Lead technical efforts between teams to proactively resolve issues with applications, performance, infrastructure, and configurations, while serving as a final escalation point for IAM tools while providing and maintaining accurate documentation.
Ensure a strong understanding of IAM best practices and requirements by building strong relationships and proactively engaging to safely maintain and track access.
Develop seamless and transparent migration strategies from legacy IAM integrations with minimal impact to business processes, workflows, and user communities
Oversee new developments and life-cycle management of the services related to Identity Governance and Administration services.
Identify, implement, and improve current processes by identifying gaps and recommending/delivering changes and enhancements to support controls, data quality, security risk reduction, scalability, efficiency, and regulatory compliance.