About the Organization

The Executive Office of Health and Human Services is comprised of 11 agencies and the MassHealth program.EOHHS seeks to promote the health, resilience, and independence of the nearly one in three residents of the Commonwealth we serve. Our public health programs touch every community in the Commonwealth. To know more about EOHHS please visit https://www.mass.gov/orgs/executive-office-of-health-and-human-services

About the Role

Commonwealth’s Executive Office of Health and Human Services (EOHHS) is looking for an Application Support/Developer to assist with strategic planning andtactical implementation of our next-generation enterprise-wide IAM solution across a majority of EOHHS internal and client-facing applications.

This role is required to lead and support both the strategic planning and tactical implementation of the next-generation enterprise-wide Identity and Access Management (IAM) solution across the majority of EOHHS internal and client-facing applications. The position will provide architectural leadership and technical solution support to modernize IAM capabilities in alignment with Executive Office of Technology Services and Security (EOTSS) and Executive Office of Health and Human Services (EOHHS) standards, policies, and security guidelines. In addition, the role will collaborate closely with business stakeholders and application development teams across multiple EOHHS agencies to design and implement a standardized, secure, and scalable IAM framework that enhances interoperability, strengthens security, and improves user access management across the enterprise.

The primary work location for this role will be at 1 Enterprise Drive, Quincy, Massachusetts 02171. The work schedule for this position is Monday through Friday, 9:00AM to 5:00PM EST. This position is expected to follow a hybrid model of reporting to work that combines in-office workdays and work from home days as needed.

Responsibilities

• Provide technical leadership in IAM technologies, architecture, and solutions.
• Collaborate with business stakeholders and application development teams from multiple EOHHS agencies to define, architect, and implement a standard based secure IAM solution that is scalable, robust, and performant while fulfilling business requirements and the Commonwealth of Massachusetts’ security guidelines.
• Architect solutions for new and more dynamic environments with Agile, DevOps, containers, microservices, stateless architectures, and APIs.
• Document and present technical architecture and design with a focus on architectural standards, growth, performance, flexibility, reliability, scalability, and security.
• Develop detailed plans and execution in security administration to meet the needs of applications hosting Personal Identifiable Information (PII) and Personal Health Information (PHI) data sets.
• Define, plan, and design innovative Identity Management solutions to meet the needs of Business to Business (B2B) and Business to Customer (B2C) segments of IAM.
• Lead technical efforts between teams to proactively resolve issues with applications, performance, infrastructure, and configurations, while serving as a final escalation point for IAM tools while providing and maintaining accurate documentation.
• Ensure a strong understanding of IAM best practices and requirements by building strong relationships and proactively engaging to safely maintain and track access.
• Develop seamless and transparent migration strategies from legacy IAM integrations with minimal impact to business processes, workflows, and user communities
• Oversee new developments and life-cycle management of the services related to Identity Governance and Administration services.
• Identify, implement, and improve current processes by identifying gaps and recommending/delivering changes and enhancements to support controls, data quality, security risk reduction, scalability, efficiency, and regulatory compliance.

Preferred Qualifications

• Minimum of eight (8) years of overall IT experience delivering enterprise-scale solutions and integrations with minimum Four (4) years of experience as an IAM Architect using modern enterprise authentication and access management technologies in a large technology enterprise environment.
• Four (4) years of experience as a lead IAM Developer for large scale enterprise applications
• Professional experience in the healthcare domain preferred
• Proven hands-on experience with developing/architecting solutions using two or more leading IAM Solution providers such as Azure, Oracle, ForgeRock and Ping.
• Demonstrated experience with performance management and capacity planning for large scale enterprise applications
• Thorough understanding of modern enterprise architecture and hands-on experience with Enterprise Application frameworks
• Excellent knowledge of authentication protocols such as SAML, OpenID Connect, OAuth, MFA, and Risk Based Authentication
• Ability to translate business strategies and project portfolios into short and long-term architectural plans, detailed requirements, and models
• Strong understanding of risk management, disaster recovery, business continuity, IT security architecture, and IT regulatory compliance
• Ability to comprehend and leverage the functions and capabilities of new technologies
• Ability to create estimations of time and resource requirements for different activities and determine which activities can be completed in parallel and in sequence
• Methodical and able to follow documented procedures and instructions
• Ability to keep meticulous and consistent documentation of processes, architecture, and solutions
• Strong multitasking and time management skills with the ability to prioritize effectively and efficiently
• Excellent problem-solving and analytical skills, with the ability to independently analyze reported issues, document, and recommend solutions
• Ability to collaboratively work with technical and non-technical staff, as well as upper management
• Excellent communication and writing skills with the ability to clearly communicate technical concepts to both technical and non-technical audiences across all levels of an organization
• Hands-on experience with the Oracle AIMS technology stack.
• Working knowledge of Ping Identity products.
• Acquiring familiarity with Azure Active Directory.
• Develop and transfer existing reports from Oracle BI Publisher by using technologies to new IAM solution using AWS and Ping ForgeRock products
• Hands-on experience securing web services through external gateways and channels.
• Architected and deployed enterprise identity and access management solutions to provide authentication, authorization, and single sign-on across cloud and on-premises applications.

Pre-Offer Process:

A criminal background check will be completed on the recommended candidate as required by the regulations set forth by the Executive Office of Health and Human Services prior to the candidate being hired. For more information, please visit http://www.mass.gov/hhs/cori

Education, licensure and certifications will be verified in accordance with the Human Resources Division’s Hiring Guidelines.

Education and license/certification information provided by the selected candidate(s) is subject to the Massachusetts Public Records Law and may be published on the Commonwealth’s website.

ADA Reasonable Accommodation: If you require a reasonable accommodation with the application/interview process, please contact us at: EOHHS Candidate ADA Requests

For questions, please the contact the Office of Human Resources at 1-800-510-4122 and select option #4.

First consideration will be given to those applicants that apply within the first 14 days.

Minimum Entrance Requirements:

Applicants must have (A) at least three (3) years of full-time or equivalent part-time professional or practical experience in the field of information technology application development and support, or (B) any equivalent combination of the required experience and the substitutions below.

Substitutions:

I. An Associate’s degree in a related field may substitute for one (1) year of the required experience.

II. A Bachelor’s degree or higher in a related field may substitute for two (2) years of the required experience.

III. A Master’s degree or higher in a related field may substitute for the required experience.

Salary placement is determined by a combination of factors, including the candidate’s years of directly related experience and education, and alignment with our internal compensation structure as set forth by the Human Resources Division’s Hiring Guidelines. For all bargaining unit positions (non-management), compensation is subject to the salary provisions outlined in the applicable collective bargaining agreement and will apply to placement within the appropriate salary range.

Comprehensive Benefits

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

Want the specifics? Explore our Employee Benefits and Rewards!

An Equal Opportunity / Affirmative Action Employer. Females, minorities, veterans, and persons with disabilities are strongly encouraged to apply.

The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, disability, national origin, veteran status, or any other basis covered by appropriate law. Research suggests that qualified women, Black, Indigenous, and Persons of Color (BIPOC) may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage individuals who believe they have the skills necessary to thrive to apply for this role.