Identity and Access Management (IAM) Solutions Architect

King County•Chinook Building 401 5th Avenue Seattle, WA

21h•Hybrid

About The Position

King County's Department of Information Technology (KCIT) is seeking a highly skilled Identity and Access Management (IAM) Solutions Architect to join our Security and Privacy team. The IAM Solutions Architect plays a key role in leading strategy and design for IAM across the County, developing modern identity architectures that streamline lifecycle management and simplify the enterprise identity portfolio. About King County Department of Information Technology (KCIT) King County is committed to being the best-run government in the nation, and King County Information Technology (KCIT) is helping lead that transformation. KCIT harnesses the power of technology to modernize operations, advance digital equity and social justice, and deliver innovative solutions that engage, empower, and serve our residents, businesses, and community partners. Recognized by the National Association of Counties (NACo) for excellence in vision, strategy, innovation, and collaboration, KCIT is focused on delivering smart, secure, and customer-centered technology services that strengthen county operations and support thriving, resilient communities. As the technology business partner to all 18 County departments, KCIT provides the foundational systems and services that power many of the region’s most essential functions. We work side-by-side with our partners to design and deliver technology solutions that enhance customer experience and advance King County’s mission. Learn more about KCIT at: http://kingcounty.gov/depts/it.aspx

Requirements

In depth experience designing and fine-tuning Enterprise Identity Architecture
Expert level knowledge on the inter-workings of Active Directory and Entra ID
Thorough understanding of Public Key Infrastructure, Certificate Management and HSMs
Strong background in managing Enterprise Applications and Registrations and using Managed Identities and Service Principals
Good working knowledge of Privileged Access\Identity Management
Expert level knowledge of DNS and DHCP
Full understanding of Modern authentication, particularly related to Azure (SSO, Tokens, MFA, passkeys, API permissions, etc.)
Full understanding of Group and Identity lifecycle management.
Full understanding of Directory syncing architecture including AD Connect and Cloud Sync
Expansive knowledge on access tiering, management planes and privileged access workstations
Good knowledge of Intune and SCCM Device Management and Compliance Policies
Solid understating of networking concepts, Border segments, Trusts, and Policies

Nice To Haves

Application proxy competency
History with Guest access and B2C a plus
Technical certifications related to information security, risk or compliance, information technology such as network, server, database, cloud infrastructure or engineering, project management methodologies, leadership or other relevant certifications are desired

Responsibilities

Collaborate with peer architects, service owners, and other technical staff in determining the optimum IAM designs for vendor and in-house developed application solutions.
Translate business requirements into long-term Identity and Access architecture designs.
Create and manage architectural strategies and roadmaps across multiple projects, functional teams, platforms, and/or technology systems to support the enterprise architecture.
Consult with internal and external customers, stakeholders, and IT staff to align reference architectures with business and technical requirements.
Keep up with the ever-changing IAM landscape by tracking all changes to the technologies in use as well as the security ramifications involved.
Other duties as assigned.