Job Description

Under general direction of the Director of Identify and Access Management, the Identity Governance Engineer and Architect will advance the City’s centralized cybersecurity projects. 

The Identity Governance Engineer and Architect will take ownership and be responsible for the implementation of strategic security projects focusing on driving data protection and security compliance city-wide.  The successful incumbent will partner with stakeholders across various City departments to build on opportunities that strengthen security, deliver meaningful cybersecurity and IAM solutions to our clients, and support city-wide goals.

ESSENTIAL JOB DUTIES AND FUNCTIONS:

• Defines and establishes charters for strategic cybersecurity & IAM projects in collaboration with key stakeholders.
• Works with each cybersecurity & IAM focus area/team to identify a long-term vision and high-level strategy; organizes long-term goals into prioritized projects, determines allocation of resources, and helps to ensure continuous progress.
• Identifies ways to improve efficiency via documentation, templates, and standardized processes.
• Serves as the glue between cybersecurity and other stakeholders; develops relationships and promotes cybersecurity awareness in the areas of system acquisition and deployment.
• Serves as the point of escalation for the program's project managers to help resolve any roadblocks and constraints in the process of project delivery.
• Defines and delivers metrics to measure project success and compliance.
• Works closely with IAM and Cybersecurity Architect team to deliver IAM and Cybersecurity solutions.
• Participates in solution architecture design; leads security efforts assisting with the integration and initial implementation of IAM solutions

NATURE OF WORK: Work Location: Incumbent will conduct the majority of work at the Department of Technology, 1 South Van Ness, San Francisco, CA.  However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary. Telecommuting options are available upon the appointing officer’s approval and at the appointing officer’s discretion.

Qualifications

Possession of an Associate's degree in Computer Science or related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field]. AND Experience: Five (5) years of experience in Identity and Access Management.

Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/ forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field.  AND

Ability to pass CJIS background check

DESIRABLE QUALIFICATIONS: The stated desirable qualifications may be used to identify job finalists at the end of the selection process when candidates are referred for hiring.

• Security experience across multiple domains spanning technical, operational, and business functions
• Experienced Java/J2ee programmer 
• Strong experience in Oracle Identity Manager identity provisioning and de-provisioning life cycle
• Custom connector development and RESTful API webservice development
• Experience with Oracle fusion middleware and Oracle application product implementation cycles.
• Experience with application servers Oracle Weblogic and Tomcat.
• Knowledge of AD,PeopleSoft product HCM and FSCM modules.
• Experience with Windows, Linux, and Unix Operating Systems
• Experience with cloud offerings Paas, IaaS and SasS.
• Experience with DR solutions  and data center migration
• Experience in directory services such as OID,OVD, OUD
• Experience with Oracle databases 11g and 12c. 
• Experience managing the remediation of findings from internal or external assessments (Internal Audits, SOX, PCI, etc.)
• Experience creating dashboards for executive reports
• Hands-on experience in developing communication plans and rollout advisories.
• PMP, CSM, CISSP, GISP, CIPP, or CSSLP certification, or any other related industry certification
• Cloud security architecture experience
• Experience with Docker, Kubernetes and microservices
• Experience in making recommendations to updates on IT security policies and procedures.
• Knowledge of vulnerability assessments and penetration tests.

NOTE:

1. Medical Testing: Prior to appointment, eligible candidates must successfully pass the TB testing process.

2. Security Clearances & Background Investigations: Positions in this classification may require that successful candidates who become eligible for appointment may be required to go through a background investigation to determine the candidate’s suitability for employment in this classification. Factors considered in the investigation may include employment history, use of illegal/controlled substances. Reasons for rejection based on this investigation may include, but not limited to: applicable convictions, repeated or serious violations of the law, inability to accept supervision, inability to follow rules and regulations, falsification of application materials and/or other relevant factors. Failure to obtain and maintain security clearance may be basis for termination.

VERIFICATION: Applicants may be required to submit verification of qualifying education and experience at any point in the application and/or departmental selection process. Written verification (proof) of qualifying experience must verify that the applicant meets the minimum qualifications stated on the announcement. Written verification must be submitted on employer’s official letterhead, specifying name of employee, dates of employment, types of employment (part-time/full-time), job title(s), description of duties performed, and the verification must be signed by the employer. City employees will receive credit for the duties of the class to which they are appointed. Credit for experience obtained outside of the employee’s class will be allowed only if recorded in accordance with the provisions of the Civil Service Commission Rules. Experience claimed in self-employment must be supported by documents verifying income, earnings, business license and experience comparable to the minimum qualifications of the position. Copies of income tax papers or other documents listing occupations and total earnings must be submitted. If education verification is required, information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at http://sfdhr.org/index.aspx?page=456.

NOTE: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.

Additional Information

APPOINTMENT TYPE: Permanent Exempt (PEX) - Full Time, this position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. COMPENSATION:  $142,636 to $179,400 annually ($68.5750 to $86.2500 hourly)

HOW TO APPLY:

• In addition to submitting your application, you MUST submit this SUPPLEMENTAL QUESTIONNAIRE.
• Applicants are encouraged to apply immediately as this recruitment may close at any time, but not sooner than FEBRUARY 11, 2022 AT 11:59PM.
  • Your application MUST include a resume.  To upload, please attach using the "additional attachments" function.

You may contact Connie Poon via email at Connie.Poon@sfgov.org with questions regarding this opportunity.

Late or incomplete submissions will not be considered. Mailed, hand delivered or faxed documents/applications will not be accepted.

RIGHT TO WORK: All persons entering the City and County of San Francisco workforce are required to provide verification of authorization to work in the United States.  Please be informed that the Department of Technology will NOT sponsor visa applications/transfer.

HELPFUL INFORMATION

• Information About The Hiring Process
• Conviction History
• Employee Benefits Overview  
• Equal Employment Opportunity 
• Disaster Service Worker
• ADA Accommodation
• Veterans Preference
• Right to Work
• Copies of Application Documents
• Diversity Statement

All your information will be kept confidential according to EEO guidelines.

CONDITION OF EMPLOYMENT:  All City and County of San Francisco employees are required to be vaccinated against COVID-19 as a condition of employment.  For details on how it is applicable to your employment, please click here.

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.