Senior Security Infrastructure Specialist

Senior Security Infrastructure Specialist
Ministry of Public and Business Service Delivery
GovTechON - Enterprise Technology Delivery; Identity & Access Management (IAM) Branch
Language of Position(s):
1 Permanent
Effective January 1st, 2024 the salary range for this position is $1,852.51 per week in compliance with OPSEU Unified Bargaining Unit collective agreement provisions. The new rates, effective retroactive to January 1, 2024, were recently confirmed and dates for implementation of the new salary rates are still to be determined.
The Ministry of Public and Business Service Delivery, Identity & Access Management (IAM) Branch is seeking a dynamic and innovative hands-on software technology expert to join our team as we modernize the enterprise identity and access systems for the Ontario Government.
OPS Commitment to Diversity, Inclusion, Accessibility, and Anti-Racism:
We are committed to build a workforce that reflects the communities we serve and to promote a diverse, anti-racist, inclusive, accessible, merit-based, respectful and equitable workplace.
We invite all interested individuals to apply and encourage applications from people with disabilities, Indigenous, Black, and racialized individuals, as well as people from a diversity of ethnic and cultural origins, sexual orientations, gender identities and expressions.
Visit the OPS Anti-Racism Policy and the OPS Diversity and Inclusion Blueprint pages to learn more about the OPS commitment to advance racial equity, accessibility, diversity, and inclusion in the public service.
Refer to the "How to apply" section if you require a disability-related accommodation.
As a Senior Security Infrastructure Specialist, you will:
• Sustain multiple identity and access management COTS such as Oracle Identity Governance suite, Oracle Access Management suite, Active Directory suite, Azure AD, Entrust PKI suite and ministry developed custom components by installing, configuring, tuning, testing, patching, supporting, troubleshooting, monitoring, and scripting software modules as the senior software subject matter expert (SME).
• Inform architectures and designs for enterprise IAM systems by providing advice, analysis, and guidance on the capabilities, functions, interfaces, and system requirements for IAM COTS, and ministry developed custom components in order to attain strategic business objectives especially those related to identity, access, and security.
• Perform and lead operational support for enterprise IAM systems and their underpinning COTS such as Oracle Identity Governance suite, Oracle Access Management suite, Active Directory suite, Azure AD, Entrust PKI suite to meet service level objectives (e.g. 99.9% availability, 100,000 authentications/day, sub-second response time) and ensure the continued health and supportability (e.g. current patch levels), including working collaboratively with vendors such as Oracle, Microsoft, and Entrust and internal service partners.
• Perform and lead the implementation of enterprise IAM systems through supervision of team members, internal service providers and vendors, as a senior software SME ensuring the realization of corporate [Ontario Public Service (OPS)] security plans and objectives.
• Provide technical direction and leadership to staff and contractors on projects.
• Technical Knowledge and Essential Skills
Expert technical knowledge of Oracle IAM product suites such as Oracle Identity Governance, Oracle Access Management, Oracle Directory Suite, and Oracle Connector packs, including deployment in on-prem and cloud environments.
• Expert technical knowledge of Microsoft IAM products suites such as Active Directory (AD), Azure AD, Microsoft Identity Manager (MIM) – Credential Management including deployment in on-prem and cloud environments.
• Hands on experience sustaining Oracle, Entrust, and Microsoft IAM product suites (as listed above) in an enterprise implementation comprised of cloud and on-prem technologies with high availability, responsiveness and throughput.
• Hands on experience integrating those suites with 3rd party tools for monitoring, administration, and automation such as Oracle Enterprise Manager, HP OpenView, Nagios.
• Knowledge of IAM frameworks and standards such as FICAM, NIST, SAML, OIDC/OAuth, and IAM/IT security technologies such as PKI, SSL, TLS, one-time password tokens, smartcards, and RFID enabled cards.
• Knowledge and experience with system development methodologies such as agile especially specialized methodologies for the implementation and sustainment of Oracle, Entrust, and Microsoft COTS.
• Knowledge of advanced and emerging security architectures, designs, and related technologies, IT security and contingency principles, methodologies, mechanisms and techniques.
• Knowledge of IT Service management such as incident, change, configuration, problem, continuity, and availability and quality methodologies, frameworks, processes, procedures, and tools.
• Knowledge of procurement policies and vendor management methods to acquire and manage services provided by external vendors, produce evaluations and proof of concept.
• Demonstrated experience in the enforcement of security policies and practices.
Project Management and Leadership Skills
• You can provide team leadership to the section by assisting in the prioritization of issues, assignments and projects and the monitoring of critical project streams.
• You can manage project teams in the development, enhancement, installation and maintenance support of complex services.
You have analytical skills to address client ministry identity and access needs, plan, organize and implement projects in a multi-project environment.
• You have analytical skills to conduct feasibility studies and business analyses to evaluate technological advances and prepare business cases and procurements such as RFQ, RFS, RFI, RFB, RFP, and RFT.
• You have research skills to conduct research and analysis of advances in identity, access, authorization, and security products, technology, methodologies and techniques.
You have the ability to lead and facilitate technical discussions with vendors, client ministries, service providers, other technical staff and senior management.
• You can provide specialized technical expertise and advice and issues resolutions.
• 1 English Permanent, 222 Jarvis St, Toronto, Toronto Region, Criminal Record and Judicial Matters Check
~ In accordance with the Ontario Public Service (OPS), Employment Screening Checks Policy (ESCP), the top candidate(s) may be required to undergo a security screening check. Required security screening checks along with your written consent, will be sent to the Transition and Security Office (TSO), Corporate Talent Programs Branch, Talent and Leadership Division to evaluate the results. If applicable, the TSO, with your written consent, will request and obtain any additional employment screening checks that were not obtained directly by you. A record under the Criminal Code and/or other federal offence record(s) does not automatically mean you will be ineligible for the position. The employment screening check(s) will only be reviewed and evaluated by the TSO for the purpose of making a security clearance decision. Using concrete examples, you must show how you demonstrated the requirements forthis job. If you require a disability related accommodation in order to participate in therecruitment process, please ContactUs to provide your contact information. All Ontario Public Service external job advertisements are posted in English and French. To confirm the language requirements of a job, check the "language of position" information at the top of each job ad. For all positions, candidates will be assessed in English, the business language of the Ontario Public Service. For English/French designated bilingual positions, candidates will also be assessed through French-language proficiency testing.

This site is maintained by the Government of Ontario