Identity & Access Systems Engineering Analyst I (Information Systems Analyst I, Opt. S)

Position Overview

Are you looking for a rewarding career with an organization that values their staff? The Department of Innovation & Technology (DoIT) is seeking to hire qualified candidates with the opportunity to work in a dynamic, creative thinking, problem solving environment. This position serves as an Identity & Access Systems Engineering Analyst I for the (DoIT), performing difficult and specialized professional functions of configuring identity management systems. In this role, you will review existing identity and access management systems within DoIT and other state agencies for secure operation. Additionally, you will perform secure configuration and engineering of identity systems to prevent methods of gaining unauthorized access to state agencies' computer systems. If you possess these knowledges, skills, abilities and experience, we invite you to apply for this position with DoIT!

As a State of Illinois employee, you receive a comprehensive benefits package including:

• Competitive Group Insurance benefits including health, life, dental and vision plans
• Flexible work schedules (when available and dependent upon position)
• 10 -25 days of paid vacation time annually (10 days for first year of state employment)
• 12 days of paid sick time annually which carryover year to year
• 3 paid personal business days per year
• 13-14 paid holidays per year dependent on election years
• 12 weeks of paid maternity/paternity leave
• Pension plan through the State Employees Retirement System
• Deferred Compensation Program – voluntary supplemental retirement plan
• Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP)
• Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility

For more information regarding State of Illinois Benefits follow this link: https://www2.illinois.gov/cms/benefits/Pages/default.aspx

Essential Functions

• Under general direction, serves as a Identity and Access Systems Engineering Analyst I for the Department of Innovation & Technology (DoIT), performing difficult and specialized professional work in areas of Systems Services as a team member, including configuring identity & access management (IAM) systems.
• Performs secure configuration and engineering of identity systems to prevent methods of gaining unauthorized access to state agencies' computer systems and performs technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments of relevant IAM technology focus areas.
• Identifies and assesses difficult and specialized components of identity and access management systems and procedures and develops and recommends measures to safeguard systems before and after they are compromised for DoIT and other state agencies.
• Monitors identity and access management systems for operational and security issues and provides management with reports and system studies of operation.
• Participates in the difficult and complex investigations of alleged computer security incidents, including but not limited to the handling of electronic evidence.
• Keeps abreast of new developments such as (industry best practices, standards, approaches, tools, and techniques as propagated by the International Standards Organization, Information Technology Infrastructures Library, National Institute of Standards and Technology (NIST) and other governing and certification bodies such as ISC2, Information Systems Audit and Control Association) in the information technology field by continuing education through online training platforms, meetings, training sessions, seminars, and conferences to increase familiarity with and remain current on products, vendors, techniques, and procedures.
• Performs other duties as required or assigned which are reasonably within the scope of duties enumerated above.

Minimum Qualifications

• Requires knowledge, skill and mental development equivalent to completion of four (4) years of college with course work in computer science or directly related fields.
• Requires one (1) year of professional experience in System Services, information security, cyber security, or a related information technology field.

Specialized Skills

• Requires one (1) year of professional experience in configuring and maintaining identity and access management (IAM) systems, including integration with enterprise identity providers Microsoft Active Directory, Azure Active Directory, and OKTA.
• Requires one (1) year of professional experience performing security analysis and vulnerability assessments of IAM systems, including identification and remediation of technical flaws, weaknesses, and potential attack vectors.
• Requires one (1) year of professional experience in applying IAM-related protocols and standards, including Security Assertion Markup Language (SAML), Initiative for Open authentication (OATH), Lightweight Directory Access Protocol (LDAP), Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Dynamic Host Configuration protocol (DHCP), to support secure authentication and access control.
• Requires one (1) year of professional experience conducting and supporting penetration testing and forensic analysis related to identity systems, including monitoring for anomalous activity and investigating security incidents.

Preferred Qualifications

• One (1) year of professional experience in configuring and maintaining identity and access management (IAM) systems, including integration with enterprise identity providers such as Microsoft Active Directory, Azure Active Directory, and OKTA.
• One (1) year of professional experience performing security analysis and vulnerability assessments of IAM systems, including identification and remediation of technical flaws, weaknesses, and potential attack vectors.
• One (1) year of professional experience in applying IAM-related protocols and standards, such as Security Assertion Markup Language (SAML), Initiative for Open authentication (OATH), Lightweight Directory Access Protocol (LDAP), Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Dynamic Host Configuration protocol (DHCP), to support secure authentication and access control.
• One (1) year of professional experience conducting and supporting penetration testing and forensic analysis related to identity systems, including monitoring for anomalous activity and investigating security incidents.
• One (1) year of professional experience diagnosing and resolving intermediate-level system issues, including identity-related operational problems and assisting senior staff with more complex technical challenges.
• One (1) year of professional experience documenting technical procedures and playbooks for IAM engineering tasks, including secure configuration, monitoring, and reporting of identity systems.
• One (1) year of professional experience evaluating compliance with cybersecurity regulations and standards, including the National Institute of Standards and Technology (NIST) Special Publication 800-63 (A, B, and C), and recommending appropriate security controls.
• Ability to analyze data logically and exercise sound judgement in defining and evaluating programs of an operational or procedural nature.
• Ability to gain and maintain effective working relationships with associates, vendors, clients, and others.
• Developed verbal and written communication skills to present technical information clearly and precisely to diverse audiences, including business users, development teams, and agency executives.

Conditions of Employment

NOTE: Applicants must possess the ability to meet ALL of the following conditions of employment, with or without reasonable accommodation, to be considered for this position.

• Requires the ability to verify identity.
• Requires employment authorization to accept permanent full-time position with State of Illinois.
• Requires the ability to pass a position specific, agency required background check and requires self-disclosure of criminal history.
• Requires ability to travel in the performance of duties.
• Requires ability to work outside of normal business hours to meet deadlines.
• Requires the ability to serve in an on-call capacity.
• Requires the ability to attend seminars, conferences, and training to remain current on methods, tools, ideologies, or other industry related topics relevant to job duties.
• Requires the ability to use agency supplied equipment such as laptop, personal computer, work cell phone, etc.
• Requires the ability to lift and carry objects or equipment weighing up to 50 pounds. This is considered medium work as defined by the U.S. Department of Labor (20 CFR 404.1567(c)). Medium work involves lifting no more than 50 pounds at a time with frequent lifting or carrying of objects weighing up to 25 pounds.
• The conditions of employment listed are incorporated and/or related to any duties included in the position description.