You are viewing a preview of this job. Log in or register to view more details about this job.

IT Identity Engineer, Senior


$91,027.77 - $136,541.65 Annually



Job Type


Remote Employment

Remote Only

Job Number



Information Technology


ERM-Identity & Access Mgmt

Opening Date


Closing Date

4/19/2024 11:59 PM Central



Hennepin County's Information Security division seeks a Senior IT Identity Engineer for the Identity and Access Management (IAM) team. The team is responsible for identity management, single sign-on (SSO), privileged access management (PAM), and other enterprise identity services. This position is a subject matter expert for the county’s business-to-consumer (B2C) customer IAM (CIAM) environment. The county’s B2C service enables business delivery of user-friendly and secure online services to our residents. The ideal candidate will have a strong background in identity management, security, and cloud technologies, with a focus on delivering secure and user-friendly experiences to residents.


Candidates with a desire for public service and effective written and verbal communication skills are encouraged to apply.


Current Hennepin County employees who refer a candidate hired into an open competitive position may be eligible for a $500 referral bonus. For more information visit employee referral program.  



Location and hours:

This position is remote. Remote employees may be required to come on-site 0 to 12 days a year for work meetings, trainings, or for any other reasons that their supervisor may deem necessary (may include additional days for onboarding and new employee training). Supervisors will provide as much advance notice as practicable.

Based on the business needs for this position, individuals must reside in Minnesota or have approval to work from a state authorized by Hennepin County as approved for out-of-state remote work. For a complete listing of allowable states, click here. Candidates must currently reside in or be willing and able to relocate to Minnesota or one of the approved states. Employees living out of state are responsible for all travel expenses when required to come on-site. Individuals who do not reside in or are not willing to relocate to one of these states will not be considered.



New employees who are hired into remote or hybrid positions between January 2, 2022 to December 31, 2024, will receive $500 toward the cost of establishing consistent internet connectivity, payable upon completion of 6 months of employment.  

About the position type:
This is a full-time benefit earning position. This position is internally classified as a Senior IT Engineer- IT Infrastructure Engineer in the IT Engineer job class series. Click here to view the job classification specification.

At this time, employees may be eligible to receive an additional cash merit of up to $2,799.11 that can be earned annually based on performance.

In this position, you will:

  • Collaborate with team members and business stakeholders to deliver solutions using Azure Active Directory B2C.
  • Influence and execute county strategy for resident-facing authentication services.
  • Manage and optimize resident sign-in experience. 
  • Manage identity user flows and custom policies to meet emerging business needs.
  • Envision, design, and implement IAM products and systems to apply principles of least privilege and zero trust.
  • Provide technical leadership and guidance to internal teams and vendors on best practices for integrating with identity systems.
  • Consult and present on projects, design decisions, incidents, and deployments as an IAM subject matter expert.

Need to have:

  • One of the following: 
    • Bachelor's degree or higher in computer science, management information systems, data engineering, business intelligence, data analytics, or a related information technology field and four or more years of information technology experience.
    • Associate/vocational/technical degree in computer science, engineering, or a related information technology field and six or more years of information technology experience.
    • Eight or more years of information technology experience. 



  • Current certification in a leading professional level certification area (e.g., Microsoft, ISC2, ISACA, SANS, etc.).

Nice to have:

  • Experience with:
    • Business-to-consumer (B2C) identity.
    • CIAM platforms; preference given to Azure Active Directory B2C.
    • Modern authentication, authorization, and access control methods available in Microsoft Entra ID (Azure AD).
    • Designing, building, supporting, and documenting solutions that enable business and reduce risk.
  • Knowledge of: 
    • Single Sign-on (SSO), SAML, Open ID Connect, OAuth, Web APIs, SCIM, passkeys, and identity verification.
    • Modern development practices and tools, including CI/CD.
  • Ability to:
    • Stay current in emerging technologies, industry trends, and cyber-attacks.
    • Educate colleagues and users in new technology and best practices.
    • Present to business and technical audiences.
    • Think strategically and tactically and have effective decision-making skills. 


About the department: 
Technology is the foundation of our work – and the work of every county employee. The Information Technology department is here to help our employees work smarter, faster and better. It is made up of 9 divisions: Business Solutions, Service Management Office, Architecture, Central Services Administration & Imaging Operations, Enterprise Development, IT Finance & Support Services, Operations, IT Strategic Alignment, and IT Security.  
About Hennepin County:
Hennepin is the largest county government organization in Minnesota. Our employees work every day to improve the health, safety and quality of life for our residents and communities. All of our jobs align to one or more of our overarching goals -- that Hennepin County residents are healthy, protected and safe, self-reliant, assured due process, and mobile.
Our employees receive a combination of generous benefits and positive workplace culture not found at other organizations. This includes meaningful work that impacts our community, competitive pay, work-life balance, a variety of benefits and opportunities to grow. Learn more at The Bridge (login as Guest).  
Hennepin County envisions an organization where our commitment to diversity and the reduction of disparities is fundamental in providing excellent service to our community.
Your future. Made here.


This posting may be used to fill current and future vacancies. 


Invitations to interview will be based upon an assessment of education and experience. Final candidates will be required to complete a background check.

If you have any questions, please contact: 
Roberta Arpinar