Identity Access Management Administrator

Title: Identity Access Management Administrator

State Role Title: 39112

Hiring Range: Up to $65,000

Pay Band: 5

Agency: Dept Behavioral Health/Develop

Location: Central Office

Agency Website: www.dbhds.virginia.gov

Recruitment Type: General Public - G

Job Duties

The Department of Behavioral Health and Developmental Services (DBHDS) is seeking an experienced individual to serve as the Identity Access Management Administrator. This position will be responsible for the provisioning of system and software account and ensuring the success of the user onboarding and deprovisioning. As part of the Identity and Access Management Team, the Enterprise Provisioning Specialists work with customers in executing the provisioning of access to IT systems, while the Identity Access Management Administrator works in collaboration with HR, Information Security, IT resources and IT business customers to set up services correctly and smoothly. Limited after hour on-call support may apply.

Additional responsibilities include:
• Managing the end-to-end IAM lifecycle, including user onboarding, modifications, and offboarding.
• Facilitating discussions between technical and non-technical stakeholders to ensure clarity in security administration processes, workflows, and support requirements.
• Monitoring the user account management workflow.
• Ensuring proper permissions are granted, changed, or revoked based on user job functions and employment status.
• Managing user attributes, roles for access control, and user profile information.
• Working with clients to determine required workflows and implement solution leveraging best practices.
• Managing access policies and entitlements for applications and resources.
• Creating, updating, and maintaining documentation of IAM procedures and processes.
• Analyzing data trends to identify patterns and potential issues related to access control.
• Identifying areas for process improvement based on data insights.
• Providing ongoing user support by addressing and resolving provisioning and access management issues.
• Identifying IT resource access errors and investigate incidents of unauthorized access.
• Running user access reports to ensure compliance with procedures and compliance standards.
• Performing periodic reviews of IT resource access and validate user entitlements.
• Collaborating with the Information Security team to implement security procedures related to user access and promptly alert the team to suspicious activity or non-compliant activity.

Minimum Qualifications

• Experience working with IAM systems, including Okta, SailPoint, Microsoft Identity Manager, or other IAM solutions.
• Proficient in using request management and ticketing systems (e.g., ServiceNow preferred).
• Proficiency with Microsoft Office Suite (Excel, Word, PowerPoint, Project and Visio).

Additional Considerations

• Proficient in managing roles, user permissions, and access across various applications and environments.
• Knowledgeable of security technologies such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and the principles of least privilege.
• Expertise in compliance standards and how access management integrates with compliance reporting and auditing processes.
• High level understanding of common IT technologies and jargon.
• Ability to create and run Excel Macros, create and run scripts to automate tasks.
• Knowledge of security best practices, compliance regulations, and potential threats to user identities.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

This position is eligible for telework opportunities; availability, hours, and duration of telework shall be approved as outlined in the Commonwealth telework policy.

For consideration, interested applicants must apply by completing the online application. A resume may also be included with your submission. However, emailed, faxed, and hand-delivered applications and/or resumes will not be accepted. This position is open until filled; however, applications/resumes will begin to be reviewed within seven (7) business days of the date of this posting. Reasonable accommodations are available to persons with disabilities during application and/or interview processes per the Americans with Disabilities Act.

DBHDS welcomes all applicants authorized to work in the U.S. For more information on how to seek this authorization, please refer to Working in the United States or contact the U.S. Citizenship and Immigration Services office directly.

For any technical assistance with the jobs.virginia.gov website, please contact applicantinquiry@dhrm.virginia.gov.

Contact Information

Name: ShaKiera Miles

Phone: N/A

Email: shakiera.miles@dbhds.virginia.gov - No Submissions, to include resumes.

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.