HBITS 07-14704 Software Architect - Expert

Job Description Project/Program

NY.gov ID

This position supports the mission critical NY.gov authentication system, which provides access to all New York State government web applications.

Day-to-Day Tasks

Duties include but are not limited to the following:

• Monitor and manage NY.GOV ID applications oversee the health, performance, and security of the Okta platform, ensuring 24/7/365 availability.
• Plan and implement new applications into Okta, configuring SSO (SAML, OIDC), MFA, and provisioning workflows. This includes working with application owners to understand their specific needs.
• Lead the architectural design and execution of directory modernization initiatives, including capacity planning, performance optimization, and lifecycle management of directory platforms such as red hat LDAP directory.
• Design, implement, and maintain Okta policies, including authentication policies, authorization policies, and access policies, to enforce security requirements and user access controls.
• Oversee and optimize user provisioning, de-provisioning, and lifecycle management processes within Okta, ensuring accuracy and efficiency.
• Work with support personnel as required to Investigate and resolve complex authentication and authorization issues reported by users or applications, performing deep technical analysis.
• Develop and evolve the overall architecture for the NY.GOV ID system, focusing on scalability, security, and resilience. This includes planning for future enhancements and integrations.
• Drive the architectural design and implementation of multiple high-difficulty, high-risk projects related to IAM and Okta. This involves defining technical requirements, creating design documents, and overseeing development.
• Proactively identify potential risks within the IAM architecture and Okta environment and develop and implement mitigation strategies.
• Conduct in-depth technical analysis of complex architectural challenges and design robust solutions, often involving multi-tiered and mixed-technology environments.
• Offer expert technical guidance and recommendations to Operations Support, Platform Support teams, and other stakeholders regarding IAM best practices and Okta functionalities with adhering to ITS policies, procedures, and standards.
• Train, guide, and mentor junior-level IAM staff, sharing knowledge and fostering their development in Okta administration and IAM principles.
• Effectively communicate technical designs, solutions, and project updates to ITS management, NYS agencies, business leaders, application owners, and technical teams.
• Work closely with development teams of the 400 applications to ensure seamless integration and proper authorization/authentication configurations.
• Analyze data and logs from fraud detection software to identify potential security threats or anomalies related to authentication and access.
• Ensure the integrity and security of identity data managed within Okta and related systems.
• Using reporting tools generate monthly usage reports and metrics for auditing and monitoring.
• Develop and Maintain Documentation: Create and maintain comprehensive architectural diagrams, design documents, standard operating procedures, and knowledge base articles.
• Must be available to work extra upon need for unscheduled problems and emergencies - Perform approved production changes scheduled in off-hour maintenance windows as assigned.
  
  

These duties are designed to be performed on a regular basis, reflecting the ongoing nature of managing a mission-critical system. The emphasis is on proactive management, strategic thinking, and expert problem-solving.

Mandatory Qualification

Software Architect -

Makes high-level design choices and dictates technical standards, including software coding standards, tools, and platforms. Designs multi-leveled architecture or component interactions of a large-scale software system.

Expert -

84 Months: Candidate is able to provide guidance to large teams and/or has extensive industry experience and is considered at the top of his/her field.

Requested Qualifications

• 84 months experience in the technical configuration, troubleshooting, and performance tuning of IAM connections through SAML and OIDC configurations, including technical analysis of complex authentication and authorization issues.
• 60 months experience in the technical development and onboarding of applications through SAML and OIDC configurations, collaborating closely with application teams to ensure seamless integration and proper authorization/authentication.
• 36 months experience in the technical support and administration of Okta, including monitoring and managing the Okta environment for health, performance, and security, and leading the integration of new applications with SSO, MFA, and provisioning/de-provisioning workflows.
• 24 months experience in the technical support and administration of Red Hat LDAP services with a large-scale deployment of over 10,000,000 seats, ensuring the integrity and security of identity data.
• Bachelor's Degree in Computer Science, Engineering, or a related technical discipline.