Principal OIM Engineer - Department of Technology (9976)
Job Description
Under general direction of the Director of Identify and Access Management, the Principal OIM Engineer will support and advance the City’s Identity and Access Management (IAM) platform.
The Principal OIM Engineer will be responsible for the development, deployment, administration, and maintenance of Oracle Identity and Access Management (IAM) security solutions and programs.
ESSENTIAL JOB DUTIES AND FUNCTIONS:
The Principal OIM Engineer will contribute to the overall strategy, planning, evaluation & implementation of the entire Identity/Access Management stack. The individual in this role will significantly contribute to the direction and oversight into the IAM functions across the City and County, including areas such as developing centralized provisioning IAM engine to all Citywide Enterprise Applications, workfiow and review certification, Audit and Compliance, Hybrid cloud management, Privileged Access Management, Authentication & Authorization. This position will require expert knowledge in Oracle Fusion Middleware, Oracle Identity & Access Management administration, Identity cloud services, WebLogic administration, custom connector development, installation and configuration, performance tuning, backup, and recovery methods in multiple computing environments and must be well versed in J2EE, Service Oriented Architecture (SOA), Web Services, LDAP, XML, and SAML. This position also requires knowledge of Oracle databases and should be able to support other areas or functions as needed.
NATURE OF WORK: Work Location: Incumbent will conduct the majority of work at the Department of Technology, 1 South Van Ness, San Francisco, CA. However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary. Telecommuting options are available upon the appointing officer’s approval and at the appointing officer’s discretion. THIS POSITION IS NOT SUPPORTING 100% REMOTE WORK.
Qualifications
Possession of an Bachelor's degree in Computer Science or related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field].
AND Experience: Five (5) years of experience in Identity and Access Management.
Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/ forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field. AND
Ability to pass CJIS background check
DESIRABLE QUALIFICATIONS:
The stated desirable qualifications may be used to identify job finalists at the end of the selection process when candidates are referred for hiring.
• 7 plus years of progressive hands-on experience in design, architecture and administration of Identity and Access Management solutions using Oracle Identity and
Access Management suite .
• 7 plus years of experience in configuring automated user provisioning and access management
• 7 plus years of experience in SOA, BPEL workfiow configuration and management
• 8 years of experience in Spring, Struts, App servers, JQuery, Hibernate
• 7 plus years of experience in SOAP and RESTful framework
• 5 plus years of experience in Federation, SAML, OpenID, OAuth and other industry-standard authentication/authorization solutions.
• 10 plus years of Java, J2EE, JavaScript, HTML
• 10 plus years experience in Oracle Database and Linux operating systems
• 10 plus years experience in using Eclipse, JDeveloper, Maven
• Experience in troubleshooting issues and quickly resolve them in an efficient manner that minimizes downtime.
• Experience with Windows, Linux, and Unix Operating Systems
• Ability to perform job functions with considerable independence and judgment.
• Well organized with excellent written and verbal communications skills.
• Hands on experience in Identity cloud services and OCI
• Hands on experience in Jenkins, GitHub, Service Now
• Knowledge of vulnerability assessments and penetration tests.
• Knowledge of industry-standard frameworks – NIST, ISO, HIPAA, PCI
NOTE:
Medical Testing: Prior to appointment, eligible candidates must successfully pass the TB testing process.
Security Clearances & Background Investigations: Positions in this classification may require that successful candidates who become eligible for appointment may be required to go through a background investigation to determine the candidate’s suitability for employment in this classification. Factors considered in the investigation may include employment history, use of illegal/controlled substances. Reasons for rejection based on this investigation may include, but not limited to: applicable convictions, repeated or serious violations of the law, inability to accept supervision, inability to follow rules and regulations, falsification of application materials and/or other relevant factors. Failure to obtain and maintain security clearance may be basis for termination.
VERIFICATION: Applicants may be required to submit verification of qualifying education and experience at any point in the application and/or departmental selection process. Written verification (proof) of qualifying experience must verify that the applicant meets the minimum qualifications stated on the announcement. Written verification must be submitted on employer’s official letterhead, specifying name of employee, dates of employment, types of employment (part-time/full-time), job title(s), description of duties performed, and the verification must be signed by the employer. City employees will receive credit for the duties of the class to which they are appointed. Credit for experience obtained outside of the employee’s class will be allowed only if recorded in accordance with the provisions of the Civil Service Commission Rules. Experience claimed in self-employment must be supported by documents verifying income, earnings, business license and experience comparable to the minimum qualifications of the position. Copies of income tax papers or other documents listing occupations and total earnings must be submitted. If education verification is required, information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at http://sfdhr.org/index.aspx?page=456.
NOTE: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.
Additional Information
APPOINTMENT TYPE: Permanent Exempt (PEX) - Full Time, this position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. COMPENSATION:
$150,124 - $188,812 annually ($72.1750 to $90.7750 hourly)
HOW TO APPLY:
You may contact Connie Poon via email at Connie.Poon@sfgov.org with questions regarding this opportunity.
Late or incomplete submissions will not be considered. Mailed, hand delivered or faxed documents/applications will not be accepted.
HELPFUL INFORMATION
All your information will be kept confidential according to EEO guidelines.
CONDITION OF EMPLOYMENT: All City and County of San Francisco employees are required to be fully vaccinated against COVID-19 as a condition of employment. Someone is fully vaccinated when 14 days have passed since they received the final dose of a two-shot vaccine or a dose of a one-shot vaccine. Any new hire must present proof of full vaccination status to be appointed. Any new hire who will be routinely assigned or occasionally enter High-Risk Settings, must provide proof of having received a COVID-19 booster vaccine by March 1, 2022, or once eligible.
The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.