DPS - IT - Identity and Access Analyst - 0255

PLEASE NOTE: All applications must contain complete job histories, which includes job title, dates of employment, name of employer, supervisor’s name and phone number and a description of duties performed. If this information is not submitted, your application may be rejected because it is incomplete. Resumes do not take the place of this required information.

SUBMITTED THROUGH WORK IN TEXAS: Work In Texas (WIT) applicants must complete the supplemental questions to be considered for the posting. In order to complete the supplemental questions please go to CAPPS Recruit to register or login and access your profile. Go to CAPPS Recruit to Sign In https://erphcmprd.cpa.texas.gov/psc/candidateportal/EMPLOYEE/HRMS/c/HRS_HRAM_FL.HRS_CG_SEARCH_FL.GBL?FOCUS=Applicant&

GENERAL DESCRIPTION: Performs highly complex (senior-level) computer systems analysis work. Analyzes access requests, configures identity management systems, and improves processes that control how user accounts are created, modified, and removed. Maintains efficient operations while ensuring access is appropriate and aligned with agency standards. Works under limited supervision, with considerable latitude for the use of initiative and independent judgment.

The following Military Occupational Specialty codes are generally applicable to this position.

https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf

Applicants must fully complete the summary of experience to determine if minimum qualifications are met., 1. Design, implement, and refine identity lifecycle processes (provisioning, modification, transfers, deprovisioning).

1. Analyze business and technical requirements related to user access across enterprise systems.

2. Translate business needs into functional Identity and Access Management (IAM) configurations and workflow solutions.

3. Evaluate access governance structures and recommend improvements to role design and least-privilege alignment.

4. Administer and maintain IAM platforms (IdP, Active Directory, IGA, and PAM).

5. Conduct periodic access reviews, certification campaigns, and audits to ensure compliance with regulatory standards.

6. Educate users on authentication best practices and emerging technologies.

7. Coordinate implementation of IAM system updates, enhancements, integrations, and automation efforts.

8. Develop and maintain documentation including workflow diagrams, access control matrices, and procedural standards.

9. Review access patterns and operational metrics to identify trends and recommend process improvements.

10. Collaborate with infrastructure, application, and cybersecurity teams to ensure alignment with enterprise standards.

11. Participate in IAM-related initiatives through analysis, testing, validation, and deployment phases.

12. Provide technical guidance to Local Security Administrators (LSAs) and business stakeholders.

13. Support audit activities by providing documentation, reporting, and system analysis related to access lifecycle controls.

14. Compile and report performance metrics related to service levels and operational effectiveness; use analytics to refine RBAC roles, tune adaptive policies, and proactively address identity-related risks.

15. Educate users on authentication best practices and emerging technologies.

16. Provide timely support for access-related issues and escalations.

17. Attend work regularly and observe approved work hours in accordance with agency leave and attendance policies.

18. Perform other duties as assigned., The physical and environmental demands described here are representative of those encountered and/or necessary for the employee to successfully perform the essential functions of this job; reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. * Environment: Office/Indoors; * Ambulatory skills, e.g. stand, walk, sit; * Hand-eye coordination and arm/hand/finger dexterity; * Ability to speak, hear, smell, and exercise visual acuity; * Ability to transfer weights of up to thirty (30) pounds anticipated for this position; * Driving requirements: Occasional; short trips 1-2x/month.

Education - High School Diploma/equivalent required. Graduation from an accredited four-year college or university with a Bachelor¿s degree with Major or coursework emphasis in Information Technology, Computer Science, Information Systems or related field preferred.

Experience - Minimum of two (2) years’ experience performing systems analysis or Identity and Access Management work required. Experience performing evaluation of business requirements, workflow development, and enterprise access governance processes preferred.

Substitution Note: Additional work experience of the type described or other related education may be substituted for one another on a year-for-year basis.

Licensure and/or Certification - Certified Identity and Access Manager (CIAM) and/or Certified Access Management Specialist (CAMS) certifications preferred. If driving is required, must possess a valid driver license from state of residence.

Critical Organizational Infrastructure requirements - This job may be responsible for conducting research on, working on, or having the ability to access critical organizational infrastructure; must be able to maintain the security and integrity of the infrastructure related to this role. Additionally, and more specifically, must not be employed by nor have any connection or continuous connections to any governmental entity or political apparatus of a country listed in 15 C.F.R. §791.4.

Regulatory knowledge - Working knowledge of, or the ability to rapidly assimilate information related to TXDPS, State and Federal regulations, legislation, guidelines, policies and procedures.

Technology - Proficiency with Microsoft Office and appropriate levels of proficiency with utilized software and systems (e.g. CAPPS, SharePoint) and be able to learn new software/systems.

• Working knowledge of Windows Server and Active Directory administration.

• Proficiency with Microsoft 365 administrative platforms, including Entra ID, Exchange Admin Center, Purview, and related identity governance tools.

• Experience analyzing, configuring, and supporting identity and access management (IAM) systems within an enterprise environment.

• Ability to develop and utilize scripting solutions (e.g., PowerShell) to automate identity lifecycle processes and improve system efficiency.

Interpersonal Skills - Must demonstrate an ability to exercise poise, tact, diplomacy and an ability to establish and maintain positive, working/professional relationships with internal/external customers. Must demonstrate DPS’ core values: Integrity, Excellence, Accountability, and Teamwork.

Organizational and Prioritization Skills - Must be organized, flexible, and able to effectively prioritize in a multi-demand and constantly changing environment; able to meet multiple and sometimes conflicting deadlines without sacrificing accuracy, timeliness or professionalism.

Presentation/Communication Skills - Must be able to construct and deliver clear, concise, and professional presentations and/or communications to a variety of audiences and/or individuals.

Research and Comprehension - Must demonstrate ability to quickly and efficiently access relevant information and be able to utilize and/or present research and conclusions in a clear and concise manner.

Analytical Reasoning/Attention to Detail - Must demonstrate an ability to examine data/information, discern variations/similarities, and be able identify trends, relationships and causal factors, as well as grasp issues, draw accurate conclusions, and solve problems.

Customer Service (Internal/External) - Demonstrates a commitment to providing responsive and professional technical support to internal and external customers.

Confidentiality and Protected Information - Must demonstrate an ability to responsibly handle sensitive and confidential information and situations and adhere to applicable laws/statutes/policies related to access, maintenance and dissemination of information.

Safety - Must be able to work in safe manner at all times, avoiding shortcuts that have potential adverse results/risks, and must be able to comply with safety standards and best practices.

Schedule and Travel - Availability for after-hours, weekends, holidays, overnights, and emergency work is required. Travel in-city and surrounding area as needed.