Enterprise Systems Engineer- ATC

The Auditor-Controller/Treasurer/Tax Collector (ATC) is recruiting for an Enterprise Systems Engineer-ATC* to lead identity, data, and access governance for the department. This role owns how ATC manages who has access to what, why they have it, and how that access is reviewed and removed. It is the technical center of our move to a governed, audit-ready identity environment built on Microsoft Entra.

The person in this role designs and runs identity lifecycle and governance, builds entitlement and access review processes, and automates the work so access stays accurate as people join, move, and leave. A smaller part of the role supports the compute, network, and security platforms that identity depends on, so the engineer needs to be comfortable working across Azure infrastructure as well.

This is a leadership role in ATC's IT planning. The engineer leads complex projects, partners with division staff to translate their access needs into governed processes and serves as a key part of the change management process.

The Enterprise Systems Engineer will:

• Design and operate identity lifecycle and governance in Microsoft Entra, including joiner, mover, and leaver workflows, role-based access, and provisioning to connected systems.
• Build and run entitlement management and access review campaigns so each division can certify access on a regular cycle.
• Work with ATC divisions and subject matter experts to gather access requirements and turn them into governed, repeatable processes.
• Automate identity and governance tasks using PowerShell and the Microsoft Graph API and integrate access request flows with the department's ITSM platform.
• Manage directory and synchronization services across Entra ID and on-premises Active Directory, including AD Connect or Cloud Sync.
• Support the compute, network, and security platforms tied to identity, including Conditional Access, Defender, privileged access controls, and Azure networking.
• Document requirements, security risks, and system interoperability across the enterprise environment.
• Lead multiple projects at once and act in a system architecture capacity across on-premises and cloud.

Qualifying experience must include implementation of systems in a large organization setting with at least four (4) of the following technologies:

• Identity and Access Management platforms (Microsoft Entra ID, Active Directory, etc.)
• Identity Governance and Administration (entitlement management, access reviews, lifecycle automation)
• Cloud Platforms (Azure, AWS, etc.)
• Microsoft Enterprise Platforms (AD, O365, etc.)
• Enterprise Security Platforms (Conditional Access, Defender, PAM, etc.)
• Enterprise Virtualization Platform (VMware, Hyper-V, etc.)
• Enterprise OS Platforms (Windows)

Substitution: One (1) additional year of qualifying work experience may substitute for the education requirement.

Previous experience designing and running identity governance in Microsoft Entra is preferred. Experience with entitlement management, access review campaigns, identity lifecycle automation, PowerShell and Graph API scripting, and integrating identity workflows with an ITSM platform is highly desirable. Familiarity with Zero Trust, privileged access management, and Azure networking is a plus.

Examination Procedure: 

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Application Procedure: 

Please complete and submit the online employment application and supplemental questionnaire for consideration before 5:00 PM PST, FRIDAY, JULY 10, 2026. Resumes will not be accepted in lieu of the application and/or supplemental questionnaires.

To ensure timely and successful submission of your online application, please allow ample time to complete and submit your application before the filing deadline. Applicants will be automatically logged-out if they have not submitted the application and all required materials prior to the posted deadline.  Once your application has been successfully submitted you will receive an onscreen confirmation and an email.  We recommend that you save and/or print these for your records. Please note: if you do not receive an onscreen confirmation and an email acknowledging our receipt of your application, we have not received your application.  

If you need technical assistance, follow this link to review the Government Jobs online application guide or contact their Toll-Free Applicant Support line at (855) 524-5627. Please note that Human Resources is not responsible for any issues or delays caused by your internet connection, computer, or browser when submitting an application.

Equal Employment Opportunity (EEO) / Americans with Disabilities Act (ADA):

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

ADA Accommodation:

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Veterans' Preference:

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to the Veterans' Preference Policy.

For more important details, review the Applicant Information and County Employment Process.

Salary : $103,750 - $142,979