IT Specialist (Senior Identity, Credential, and Access Management Security Architect)

Summary

This position is located at Bureau of the Fiscal Service, Identity Credentialing and Access Management Division. As a IT Specialist (Senior Identity, Credential, and Access Management Security Architect), you will be responsible for applying advanced IT and information security principles, concepts, methods, standards, and practices sufficient to develop and interpret policies, procedures, and strategies governing the planning, design, and delivery of secure ICAM services.

Duties

• ***Important: This vacancy uses a two-phase application process. This is Phase 1 of 2 for this vacancy. To be considered for this position, you must complete both phases of the application process. *** Phase 1: You must first complete and submit your application under this announcement. Phase 2: After this announcement closes, eligible applicants will receive an email containing an exclusive link to a separate competency assessment announcement. You must use that link to complete and submit Phase 2. You must submit a résumé under both announcements, and both announcements must show Application Submitted for your application to be considered complete. You will receive application status updates only under the Phase 1 announcement. Additional instructions for completing the competency assessment will be provided in the Phase 2 announcement. Phase 2 is expected to take at least one hour to complete. Failure to complete and submit both Phase 1 and Phase 2 will result in an incomplete application and removal from further consideration. As an IT Specialist (Senior Identity, Credential, and Access Management Security Architect), you will: Serve as the Fiscal Service expert regarding the Bureau's and customer organizations' Identity, Credential, and Access Management (ICAM) infrastructure and identity security architecture, and as such, interfaces with senior Fiscal Service, Treasury, Federal Reserve, and franchise customer personnel on matters relating to ICAM design, security, and enterprise architecture. Design, develop, and manage secure authentication and identity management systems that meet current and future business requirements, applying and extending existing architectures to ensure scalability, resilience, and security. Evaluate identity and access management technologies and protocols (e.g., SAML, OAuth2, OpenID Connect) to identify potential security vulnerabilities, attack vectors, and risks associated with authentication, authorization, and federation models, and incorporate appropriate mitigations into system designs. Assess emerging threats and exploits related to identity systems, including token-based attacks, assertion misuse, trust exploitation scenarios, and other identity-focused threat vectors, and ensure that ICAM architectures incorporate appropriate safeguards. Evaluate cryptographic implementations and Public Key Infrastructure (PKI) architectures, including key management practices, certificate trust models, and entropy considerations, to ensure secure authentication and data protection mechanisms.

Qualifications

You must meet the following requirements by the closing date of this announcement. The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé. Specialized Experience for the GS-13, you must have one year (full 52 weeks) of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position is defined as: Experience designing, engineering, implementing, or enhancing enterprise Identity, Credential, and Access Management (ICAM) or identity security technologies, including authentication, federation, access control, multifactor authentication, or Public Key Infrastructure. AND Experience analyzing identity, cybersecurity, architecture, integration, or system-performance issues; evaluating technical alternatives and security risks; and developing or implementing secure solutions across enterprise systems. AND Experience communicating technical risks, architectural recommendations, and implementation approaches to technical and nontechnical stakeholders to influence decisions and support the modernization or secure operation of mission-critical services. In addition to meeting specialized experience, individuals must meet proficiency levels in each of the following competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Technical Competence, and Teamwork. For the required proficiency levels and competency definitions, please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series, 2210 A competency assessment will be used to determine whether you meet the required competency proficiency levels. Once this announcement closes, eligible applicants will receive an email containing an exclusive link to access and complete Phase 2 of the application process.

Requirements

PLEASE NOTE: Based on the current hiring restrictions, selectees may be subject to additional approvals prior to an offer being extended. All newly appointed employees to the competitive (or excepted) service are subject to a probationary (or trial) period. During this time, your performance, conduct, and suitability for continued employment will be evaluated. You will not automatically convert to permanent status at the end of the probationary (or trial) period. Your supervisor must affirmatively determine that continued employment is in the best interest of the Federal service. If no certification is made before the probationary (or trial) period ends, your appointment will be terminated. You are encouraged to actively engage with your supervisor, seek feedback, and understand role expectations. Additional guidance and support will be provided during onboarding. Must successfully complete a background investigation. Periodic reinvestigation is required no later than five years after selection and at least every succeeding five years. Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency. Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer. If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so. Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S. Obtain and use a government-issued charge card for business-related travel. File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on. Key Requirements: Please refer to the "Additional Information" section for additional Conditions of Employment. Click "Print Preview" to review the entire announcement before applying. To preview the application questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13031775 Must be U.S. Citizen or U.S. National

How to apply

Please read the entire announcement and all the instructions before you begin an application. To apply and be considered for this position, you must complete all required questionnaires, assessments, and required documentation as specified in the How to Apply and Required Documents section. The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. The application process is as follows: How to Apply: Click the Apply Online button. Answer the questions presented in the application and attach all required supporting documentation. Click Submit Application for the Phase 1 announcement before 11:59 p.m. Eastern Time on the announcement closing date. After the Phase 1 announcement closes, eligible applicants will receive an email containing an exclusive link to complete the competency assessment in Phase 2. Use the exclusive link to access the Phase 2 announcement. Click Apply and complete the five USAJOBS application steps to access the competency assessment questions. Complete the required competency questions and submit your Phase 2 application before the Phase 2 announcement closes. Important: To complete the full application process, you must submit applications under BOTH announcements. You will only receive status updates in the first announcement. Once completed, both announcements should show the Application Status as Application Submitted. If you are required to complete USA Hire assessments, you will be notified after submitting your application. The notification will appear on your application submission screen and will also be sent by email. It will include your unique assessment access link and completion deadline. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside about one (1) hour to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Visit the USA Hire Applicant Resource Center for practice assessments and assessment preparation resources. To update your application, including supporting documentation: During the announcement open period, return to your USAJOBS account, find your application record, and click Edit my application. This option will no longer be available once the announcement has closed. To view the announcement status or your application status: For more information regarding the job and applicant status, please refer to USAJOBS Help Center - How to see your application and job status. Your application status page is where you can view your application status, USA Hire assessment completion status, and review your notifications sent by the hiring agency regarding your application. Fiscal Service provides reasonable accommodation to applicants with disabilities on a case-by-case basis. Please contact us if you require this for any part of the application and hiring process. For additional information on how to apply, please visit the Partnership for Public Service's Go Government website. The Fair Chance to Compete for Jobs Act prohibits the Department of Treasury and its bureaus from requesting an applicant's criminal history record before that individual receives a conditional offer of employment. In accordance with 5 U.S. Code § 9202(c) and 5 C.F.R § 920.201 certain positions are exempt from the provisions of the Fair Chance to Compete Act. Applicants who believe they have been subjected to a violation of the Fair Chance to Compete for Jobs Act, may submit a written complaint to the Department of Treasury by email at, [email protected]. To learn more, please visit our page at: Treasury.gov/fairchanceact.gov