It Identity Engineer, Senior

Salary: $91,027.77 - $136,541.65 Annually
Location : Downtown Minneapolis
Job Type: Full-time
Job Number: 23IT20101rla036
Department: Information Technology
Division: ERM-Identity & Access Mgmt
Opening Date: 11/27/2023
Closing Date: 12/11/2023 11:59 PM Central
Description
Hennepin County's Information Security division is seeking a Senior IT Identity Engineer to join the Identity and Access Management (IAM) team. This team is responsible for several large, complex, and visible enterprise services, applications, and processes. This position is a subject matter expert for IAM products, technologies, and authentication needs at Hennepin County, including the county's Customer IAM (CIAM) environment. The ideal candidate will deliver integration and automation improvements within the scope of the IAM portfolio. Candidates with deep technical expertise and effective written and verbal communication skills are encouraged to apply.
Effective December 31, 2023, there will be a general salary adjustment of 2.5% to the minimum and maximum of the range.
Current Hennepin County employees who refer a candidate hired into an open competitive position may be eligible for a $500 referral bonus. For more information visit .
About the position type:
This is a full-time benefit earning position. This position is internally classified as a Senior IT Engineer- IT Infrastructure Engineer in the IT Engineer job class series. Click to view the job classification specification.
At this time, employees may be eligible to receive an additional cash merit of up to $2,730.84 that can be earned annually based on performance.
Location and hours:
This position is remote. Remote workers may be required to come on-site 0 to 12 days a year for work meetings, trainings, or for any other reasons that their supervisor may deem necessary (may include additional days for onboarding and new employee training). Supervisors will provide as much advance notice as practicable. Work hours will primarily be Monday through Friday, 8 a.m. - 5 p.m. with options for flexibility.
Based on business needs of this position, hires must live in or relocate to Minnesota.
New employees who are hired into remote or hybrid positions between January 2, 2022 to December 31, 2024, will receive $500 toward the cost of establishing consistent internet connectivity, payable upon completion of 6 months of employment.
In this position, you will:

• Collaborate with team members to deliver IAM services.
• Lead Customer IAM (CIAM) efforts using Azure AD B2C:
  • Manage and optimize resident sign-in experience with product owners.
  • Develop and manage identity user flows to meet emerging business needs.

Envision, design, and implement IAM products and systems to support business needs and apply principles of least privilege and zero trust.

Lead technical integrations within the full scope of IAM program.

Consult and present on projects, design decisions, incidents, and deployments as an IAM subject matter expert.

Collaborate with the business and IT community to understand requirements, business rules, and drive improvements to identity related processes.

Need to have:

• One of the following:
  • Bachelor's degree or higher in computer science, management information systems, data engineering, business intelligence, data analytics, or a related information technology field and four or more years of information technology experience.
  • Associate/vocational/technical degree in computer science, engineering, or a related information technology field and six or more years of information technology experience.
  • Eight or more years of information technology experience.

AND

• Current certification in a leading professional level certification area (e.g., Microsoft, ISC2, ISACA, SANS, etc.).

Nice to have:

• Experience with:
  • Business-to-business (B2B), business-to-consumer (B2C), and/or business-to-employee (B2E) identity.
  • CIAM platforms, such as Azure B2C, ForgeRock, Okta, or other related platforms.
  • Identity governance and administration (IGA), e.g., SailPoint IdentityNow, and/or privileged access management (PAM) solutions.
  • Modern authentication, authorization, and access control methods available in Microsoft Entra ID (Azure AD).
  • Designing, building, supporting, and documenting solutions that enable business and reduce risk.

Knowledge of:

• Technologies such as Single Sign-on (SSO), SAML, Open ID Connect, OAuth, Web APIs, SCIM, passkeys, and identity verification.
• Modern development practices and tools, including CI/CD.

Ability to:

• Stay current in emerging technologies, industry trends, and cyber-attacks.
• Educate colleagues and users in new technology and best practices.
• Present to business and technical audiences.
• Think strategically and tactically and have effective decision-making skills.

About the department:
Technology is the foundation of our work - and the work of every county employee. The Information Technology department is here to help our employees work smarter, faster and better. It is made up of 9 divisions: Business Solutions, Service Management Office, Architecture, Central Services Administration & Imaging Operations, Enterprise Development, IT Finance & Support Services, Operations, IT Strategic Alignment, and IT Security.
About Hennepin County:
Hennepin is the largest county government organization in Minnesota. Our employees work every day to improve the health, safety and quality of life for our residents and communities. All of our jobs align to one or more of our overarching goals -- that Hennepin County residents are healthy, protected and safe, self-reliant, assured due process, and mobile.
Our employees receive a combination of generous benefits and positive workplace culture not found at other organizations. This includes meaningful work that impacts our community, competitive pay, work-life balance, a variety of benefits and opportunities to grow. Learn more at (login as Guest).
Hennepin County envisions an organization where our commitment to diversity and the reduction of disparities is fundamental in providing excellent service to our community.
Your future. Made here.
Invitations to interview will be based upon an assessment of education and experience. Final candidates will be required to complete a background check.
If you have any questions, please contact:
Roberta Arpinar
Why work here?
Hennepin County embraces the Total Rewards philosophy. We want our employees to succeed - not only at work but as they move through life and its milestones. We offer advantages and opportunities others can't - including:

• Meaningful work
• Public service
• Competitive pay
• Work-life balance
• Generous benefits
• Opportunities to grow
• Commitment to your success

By working in public service, we are a part of something larger than ourselves. Together, we support those in need. We help people access information and services. We empower vibrant and diverse communities. We serve residents.
Visit our benefits page to learn more: bridge.hennepin.us/eligibility.
If you are a current Hennepin County employee please be aware that any change in job classification may affect your current benefits (such as a conversion from Vacation/Sick Leave to Paid Time Off and/or enrollment in a Health Care Saving Plan.) Information about the impact of job changes on benefits can be found
01
This position is remote. Remote workers may be required to come on-site 0 to 12 days a year for work meetings, trainings, or for any other reasons that their supervisor may deem necessary (may include additional days for onboarding and new employee training). Supervisors will provide as much advance notice as practicable.
Work hours will primarily be Monday through Friday, 8 a.m. - 5 p.m. with options for flexibility.
Based on business needs of this position, hires must live in or relocate to Minnesota.
Are you willing and able to meet these requirements?

• Yes
• No

02
Which of the following fields do you have a degree and/or certification in? Check all that apply.

• Business intelligence
• Computer science
• Data analytics
• Data engineering
• Information technology
• Management information systems
• Another related field
• None of the above

03
Select the highest degree/certificate you have completed in the field(s) above.

• Technical Certificate
• Vocational degree
• Associate degree
• Bachelor's degree or higher
• None of the above

04
In which discipline(s) do you have at least one current professional level certification(s). Check all that apply.

• Security
• Server Administration
• Network
• Data
• Cloud
• Other
• None of the above

05
Describe your relevant current certification(s) including name, provider, and year earned. Examples include Microsoft, ISC2, ISACA, SANS, etc. Type "None" if you do not have a relevant current certification.
06
How many full-time equivalent years of information technology experience do you have?

• I do not have this experience
• Less than 4 years
• 4 year or more, but less than 6 years
• 6 years or more, but less than 8 years
• 8 years or more

07
Describe your information technology experience, referencing jobs listed on your application/resume. If you do not have this experience, type "None" in the space provided.
08
Do you have experience with business-to-business (B2B), business-to-consumer (B2C), and/or business-to-employee (B2E) identity?

• Yes
• No

09
Describe your experience with business-to-business (B2B), business-to-consumer (B2C), and/or business-to-employee (B2E) identity. Include your months/years of experience, referencing jobs listed on your application/resume. If you do not have this experience, type "None" in the space provided.
10
Select the following area(s) that reflect your experience. Check all that apply. You will be asked to describe each area selected in the next question.

• I have experience with CIAM platforms, such as Azure B2C, ForgeRock, Okta, or other CIAM platforms
• I have experience with identity governance and administration (IGA), e.g., SailPoint IdentityNow, and/or privileged access management (PAM) solutions
• Neither of the above

11
Describe your experience with the platforms you selected in the previous question and your identity governance and administration (IGA), e.g., SailPoint IdentityNow, and privileged access management (PAM) solutions experience, referencing jobs listed on your application/resume. If you do not have this experience, type "None" in the space provided.
12
Do you have experience with modern authentication, authorization, and access control methods available in Microsoft Entra ID (Azure AD)?

• Yes
• No

13
Describe your experience with modern authentication, authorization, and access control methods available in Microsoft Entra ID (Azure AD), referencing jobs listed on your application/resume. If you do not have this experience, type "None" in the space provided.
14
Do you have experience with designing, building, supporting, and documenting solutions that enable business and reduce risk?

• Yes
• No

15
Describe your experience with designing, building, supporting, and documenting solutions that enable business and reduce risk, referencing jobs listed on your application/resume. If you do not have this experience, type "None" in the space provided.
16
Please choose the one recruitment source that best describes how you first learned about this job opening. Please review all possible choices before making your selection. Your response to this question helps us evaluate the effectiveness of our recruitment methods.

• College or university (job board, career services, or instructor)
• Community or nonprofit organization (counselor, job board, etc.)
• Employee or recruiter of Hennepin County
• Friend or family member that is not a Hennepin County employee
• Hennepin County job notification emails
• Indeed.com
• Job fair or networking event
• LinkedIn
• Print advertisement (flyer, postcard, billboard, transit ad, etc.)
• Professional association (job board or email)
• Social media (Facebook, Twitter, Instagram, etc.)
• www.hennepin.jobs or www.governmentjobs.com
• Other

17
For the recruitment source selected above, please provide the specific name of the person, website, or media source.
Required Question