Engineer, Identity Management

BCPS•Middle River, MD

1d•Hybrid

About The Position

Owns and optimizes the processes for user account creation and user access permission assignment and revocation. Collaborates with cross-functional teams to enhance the organization's automated user creation and permission assignment to all key systems. Performs other duties as assigned.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
Three years of experience in systems administration to include Identity and Access Management (IAM).
Three years of experience with Microsoft Graph, PowerShell scripting, Microsoft Servers and Active Directory environments.
Three years of experience with SQL and database integration.
Possession of a valid driver’s license equivalent to a non-commercial class C Maryland driver’s license is required.
Skill in scripting and programming languages such as Python, PowerShell, SQL, and VBA, with knowledge of C++ desirable.
Skill in analysis and problem-solving, particularly in IAM and user lifecycle management.
Knowledge of Single Sign-On (SSO) and federation solutions, including Azure AD, Azure B2C, Microsoft Graph, and Google Workspace.
Ability to automate and optimize processes using tools like Power Automate and Power BI.
Strong organizational, collaboration, and communication skills, with the ability to work in agile or iterative environments.
Ability to interface effectively with HR, Finance, and IT teams for security and user management needs.

Nice To Haves

Experience with Oracle Cloud ERP account management and Oracle/AD integration.
Experience with Business Objects report development.
Familiarity with Zero Trust and Cloud Identity federation models.
Supervisory or team lead experience preferred.
One or more of the following certifications are preferred: Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, CompTIA Security+, Oracle certifications related to ERP SAAS solutions preferred.

Responsibilities

Manage identity and access systems across Active Directory, Google Workspace, Azure, Student Information System, and Oracle Cloud ERP platforms.
Develop, implement, and maintain identity and access management solutions and systems.
Troubleshoot, identify, and resolve technical identity and access management related issues.
Improve identity and access management solutions and systems for protection against evolving threats and efficiency.
Assess and report on risks related to Active Directory and Privileged Access Management (PAM), ensuring compliance with regulatory requirements.
Administer user accounts, manage Microsoft licensing, and coordinate account lifecycle processes including creation, modification, and offboarding.
Leverage Power Automate, Power BI, and Business Objects for data analysis, reporting, and process automation.
Perform other duties as assigned.