Systems Architect

About the Role

Travis County Technology & Operations is seeking a Systems Architect to oversee the deployment, maintenance, and administration of highly complex server hardware, operating systems, application software, and integrated solutions. This role leads and mentors subordinate technical systems staff, monitors infrastructure performance and capacity, and provides third-tier technical support to end-user departments. The Systems Architect consults with departments to understand network needs, implements integrated network services, and troubleshoots complex system issues in collaboration with external vendors.

This classification may require a flexible work schedule to meet departmental needs.

Responsibilities

• Recommend and implement system policies and standards, ensuring adherence to approved security and disaster recovery procedures.
• Consult with departments on systems selection and automation designs to meet business objectives while maintaining integration with other networks and resources.
• Gather and document user requirements and develop highly complex system designs.
• Coordinate work performed by outside vendors and monitor vendor service level agreements (SLAs).
• Track performance trends, develop reports, and assist users in utilizing automated systems applications.
• Provide or coordinate user assistance in the field or through Help Desk activities.
• Perform other job-related duties as assigned.

Identity Architecture

• Design scalable Microsoft identity solutions for hybrid and cloud environments.
• Perform architecture reviews for new applications requiring authentication and authorization.
• Define identity standards, policies, and governance models.

Microsoft Identity Services

• Design, implement, and maintain:
  • Microsoft Entra ID
  • Active Directory Domain Services (AD DS)
  • Microsoft Entra Connect Cloud Sync
  • Microsoft Entra External ID
  • Microsoft Entra ID Governance
  • Microsoft Entra Privileged Identity Management (PIM)
  • Conditional Access
  • Identity Protection
  • Self-Service Password Reset (SSPR)
  • Passwordless Authentication
  • Windows Hello for Business
  • FIDO2 authentication

Security & Compliance

• Implement Zero Trust identity architecture.
• Develop Conditional Access strategies.
• Design MFA deployment and enforcement.
• Implement least privilege and RBAC models.
• Manage privileged administrative accounts.

Active Directory

• Design and maintain enterprise AD forests and domains.
• Manage Group Policy architecture.
• Design OU structures.
• Plan forest consolidations and migrations.
• Design disaster recovery and business continuity strategies.

Identity Governance

• Design Joiner-Mover-Leaver lifecycle processes.
• Implement automated provisioning/deprovisioning.
• Develop access certification campaigns.
• Define entitlement management workflows.
• Design identity governance reporting.

Application Integration

• Architect authentication using:
  • SAML 2.0
  • OAuth 2.0
  • OpenID Connect
  • WS-Federation
  • LDAP
  • Kerberos
  • PKI certificates
• Support enterprise application integrations with Microsoft Entra ID.

Cloud Identity

• Microsoft 365
• Azure subscriptions
• Azure RBAC
• Azure Key Vault
• Microsoft Graph API integrations

Operational Leadership

• Provide Tier III/IV escalation support.
• Mentor systems engineers and administrators.
• Create documentation and standards.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or a directly related field AND seven (7) years of relevant work experience, including one (1) year of team lead, supervisory, or management experience; OR any equivalent combination of education and experience.
• Valid Texas Driver’s License.

Preferred Qualifications

• Microsoft Certified Systems Engineer (MCSE).
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
• Microsoft Certified: Azure Administrator Associate (AZ-104).

Skills

• Knowledge of:
  • Policies, practices, procedures, and terminology of assigned function.
  • Federal, State, Local, and County applicable laws, rules, regulations, and guidelines.
  • May be required to develop knowledge of and adhere to federal and state laws requiring the confidential handling of certain health information.
• Skilled in:
  • Leadership, collaboration, and negotiation techniques.
  • Problem-solving and decision-making.
  • Verbal and written communication, including presentations and explaining technical issues in non-technical language.
• Ability to:
  • Design, install, manage, and monitor highly complex systems, operating system software, and applications.
  • Work independently and efficiently, as well as part of a team.
  • Manage time well, perform multiple tasks, and organize diverse activities.
  • Demonstrate strong customer service skills.
  • Translate policies and objectives into ideas and applications for web-based information products.
  • Research, compile, analyze, interpret, and prepare a variety of memorandums or reports.
  • Establish and maintain effective working relationships with departmental clientele, representatives of outside agencies, other County employees, officials, and the general public.

Work Environment & Physical Requirements

• Physical requirements include the ability to lift/carry up to 35-40 pounds occasionally.
• Visual acuity, speech and hearing, hand and eye coordination, and manual dexterity necessary to operate a computer and office equipment.
• Subject to standing, sitting, walking, climbing, crawling, bending, stooping, crouching, kneeling, pushing, pulling, reaching, twisting, balancing, repetitive motion, and squatting to perform essential functions.
• Subject to exposure to variations in extreme heat, cold, mechanical hazards, fumes/odors, and dust/mites.

Travis County employees may be assigned to business continuity efforts outside of normal job functions.

Schedule

8:00 AM – 5:00 PM, Monday through Friday.

Location

700 Lavaca St, Austin, Texas 78701.

Benefits

• Paid vacation and sick leave.
• Outstanding health and dental insurance.
• On-site health clinics for employees and dependents.
• Generous retirement plan.