Identity & Access Systems Engineering Analyst I (Information Systems Analyst I, Opt. S)

State of Illinois•Springfield, MO

7d•Onsite

About The Position

This position serves as an Identity & Access Systems Engineering Analyst I for the Department of Innovation & Technology (DoIT), performing difficult and specialized professional functions of configuring identity management systems. In this role, you will review existing identity and access management systems within DoIT and other state agencies for secure operation. Additionally, you will perform secure configuration and engineering of identity systems to prevent methods of gaining unauthorized access to state agencies' computer systems. The Department of Innovation & Technology (DolT) is the state's IT agency delivering an enterprise approach to statewide technology, innovation, and telecommunication services, as well as policy and standards development, lifecycle investment planning, and cybersecurity services. With over 1,500 employees, DolT delivers IT services and innovative solutions to customer agencies to improve services provided to Illinois residents, DolT offers employees the opportunity to advance their careers, develop new skills and reach their potential, both personally and professionally. DoIT is committed to promoting and preserving a workplace culture that embraces diversity and inclusion. We welcome and value employees with different backgrounds, life experiences and talents. It is the collective sum of our individual differences that provides a broad perspective, leading to greater innovation and achievement. In recruiting for our team, we recognize the unique contributions of each applicant regardless of culture, ethnicity, race, national origin, sex, gender identity and expression, age, religion, disability, and sexual orientation.

Requirements

Requires knowledge, skill and mental development equivalent to completion of four (4) years of college with course work in computer science or directly related fields.
Requires one (1) year of professional experience in System Services, information security, cyber security, or a related information technology field.
Requires one (1) year of professional experience in configuring and maintaining identity and access management (IAM) systems, including integration with enterprise identity providers Microsoft Active Directory, Azure Active Directory, and OKTA.
Requires one (1) year of professional experience performing security analysis and vulnerability assessments of IAM systems, including identification and remediation of technical flaws, weaknesses, and potential attack vectors.
Requires one (1) year of professional experience in applying IAM-related protocols and standards, including Security Assertion Markup Language (SAML), Initiative for Open authentication (OATH), Lightweight Directory Access Protocol (LDAP), Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Dynamic Host Configuration protocol (DHCP), to support secure authentication and access control.
Requires one (1) year of professional experience conducting and supporting penetration testing and forensic analysis related to identity systems, including monitoring for anomalous activity and investigating security incidents.
Ability to analyze data logically and exercise sound judgement in defining and evaluating programs of an operational or procedural nature.
Ability to gain and maintain effective working relationships with associates, vendors, clients, and others.
Developed verbal and written communication skills to present technical information clearly and precisely to diverse audiences, including business users, development teams, and agency executives.
Requires the ability to verify identity.
Requires employment authorization to accept permanent full-time position with State of Illinois.
Requires the ability to pass a position specific, agency required background check and requires self-disclosure of criminal history.
Requires ability to travel in the performance of duties.
Requires ability to work outside of normal business hours to meet deadlines.
Requires the ability to serve in an on-call capacity.
Requires the ability to attend seminars, conferences, and training to remain current on methods, tools, ideologies, or other industry related topics relevant to job duties.
Requires the ability to use agency supplied equipment such as laptop, personal computer, work cell phone, etc.
Requires the ability to lift and carry objects or equipment weighing up to 50 pounds. This is considered medium work as defined by the U.S. Department of Labor (20 CFR 404.1567(c)). Medium work involves lifting no more than 50 pounds at a time with frequent lifting or carrying of objects weighing up to 25 pounds.

Nice To Haves

One (1) year of professional experience in configuring and maintaining identity and access management (IAM) systems, including integration with enterprise identity providers such as Microsoft Active Directory, Azure Active Directory, and OKTA.
One (1) year of professional experience performing security analysis and vulnerability assessments of IAM systems, including identification and remediation of technical flaws, weaknesses, and potential attack vectors.
One (1) year of professional experience in applying IAM-related protocols and standards, such as Security Assertion Markup Language (SAML), Initiative for Open authentication (OATH), Lightweight Directory Access Protocol (LDAP), Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Dynamic Host Configuration protocol (DHCP), to support secure authentication and access control.
One (1) year of professional experience conducting and supporting penetration testing and forensic analysis related to identity systems, including monitoring for anomalous activity and investigating security incidents.
One (1) year of professional experience diagnosing and resolving intermediate-level system issues, including identity-related operational problems and assisting senior staff with more complex technical challenges.
One (1) year of professional experience documenting technical procedures and playbooks for IAM engineering tasks, including secure configuration, monitoring, and reporting of identity systems.
One (1) year of professional experience evaluating compliance with cybersecurity regulations and standards, including the National Institute of Standards and Technology (NIST) Special Publication 800-63 (A, B, and C), and recommending appropriate security controls.

Responsibilities

Serves as a Identity and Access Systems Engineering Analyst I for the Department of Innovation & Technology (DoIT), performing difficult and specialized professional work in areas of Systems Services as a team member, including configuring identity & access management (IAM) systems.
Performs secure configuration and engineering of identity systems to prevent methods of gaining unauthorized access to state agencies' computer systems.
Performs technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments of relevant IAM technology focus areas.
Identifies and assesses difficult and specialized components of identity and access management systems and procedures and develops and recommends measures to safeguard systems before and after they are compromised for DoIT and other state agencies.
Monitors identity and access management systems for operational and security issues and provides management with reports and system studies of operation.
Participates in the difficult and complex investigations of alleged computer security incidents, including but not limited to the handling of electronic evidence.
Keeps abreast of new developments such as (industry best practices, standards, approaches, tools, and techniques as propagated by the International Standards Organization, Information Technology Infrastructures Library, National Institute of Standards and Technology (NIST) and other governing and certification bodies such as ISC2, Information Systems Audit and Control Association) in the information technology field by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures.
Performs other duties as required or assigned which are reasonably within the scope of duties enumerated above.
Diagnoses and resolves intermediate-level system issues, including identity-related operational problems and assisting senior staff with more complex technical challenges.
Documents technical procedures and playbooks for IAM engineering tasks, including secure configuration, monitoring, and reporting of identity systems.
Evaluates compliance with cybersecurity regulations and standards, including the National Institute of Standards and Technology (NIST) Special Publication 800-63 (A, B, and C), and recommends appropriate security controls.

Benefits

Competitive Group Insurance benefits including health, life, dental and vision plans
Flexible work schedules (when available and dependent upon position)
10 -25 days of paid vacation time annually (10 days for first year of state employment)
12 days of paid sick time annually which carryover year to year
3 paid personal business days per year
13-14 paid holidays per year dependent on election years
12 weeks of paid maternity/paternity leave
Pension plan through the State Employees Retirement System
Deferred Compensation Program – voluntary supplemental retirement plan
Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP)
Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility