Information Technology Specialist Information Security

Overview

Duties Description

Under the direction of senior staff within the Chief Information Security Office (CISO), the incumbent will provide services for the administration of Active Directory Services (AD) within the Chief Information Security Office, Cyber Defense and Response Bureau. The incumbent will be expected to participate in technical work to improve systems architecture and infrastructure and implement new solutions. The ideal candidate will possess a solid understanding of information technology systems administration and technical support.

The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS.

Description

Duties Include, But Are Not Limited To, The Following

• Build, maintain, and support AD authentication and authorization applications such as Active Directory Federation Services.
• Build, maintain, and support AD management and automation applications such as One Identity Active Roles Server.
• Build, maintain, and support AD synchronization applications such as Microsoft Identity Manager, Azure AD Connect, and One Identity Quick Connect.
• Collaborate with other teams to integrate applications with NYS AD using common protocols such as SAML, OIDC, and LDAP.
• Collaborate with CISO and compliance teams to ensure systems meet security and compliance standards.
• Assign, approve, and track changes to supported environments.
• Ensure staff are following the proper change control procedures for all work performed.
• Perform daily monitoring of all supported services.
• Respond to requests and incidents in accordance with pre-defined SLAs.
• Collaborate with other teams on incidents, projects and threat responses.
• Troubleshoot issues on supported systems as necessary.
• Update and maintain system documentation.
• Provide after-hours support as needed.
• Perform the full range of supervisory responsibilities.

Qualifications

Minimum Qualifications

Information Technology Specialist 4 (Information Security)

Non-competitive: six years of information technology, cybersecurity, or information assurance experience, including one year at the supervisory level.

• Substitutions: A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience.
  
  Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master’s degree or higher in computer science or related field substitutes for one year of required experience.

Preferred Qualifications

• Demonstrated experience managing enterprise identity services with a strong focus on Microsoft Entra  (Azure AD) and Active Directory Federation Services (ADFS) in a production environment.
• Hands-on operational experience supporting hybrid identity environments, including synchronization and federation between on-premises Active Directory and Entra .
• Working knowledge of Entra  features, such as Conditional Access policies, identity protection concepts, authentication methods, and access governance controls.
• Experience overseeing ADFS operations, including monitoring federation health, managing relying party trusts, certificates, and authentication flows.
• Prior experience within information security, IAM, or CISO-aligned organization, supporting secure identity operations.
• Strong understanding of identity-related incident response, including troubleshooting authentication failures, federation outages, and access-related security events.

Additional Comments

ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for…