Job Description
This is a remote position. P osition Requirements .The CPA Work includes, but is not limited to, the following: Performing highly advanced (senior-level) consultative services and technical assistance work related to supporting the CAPPS Program. Responsible for the(CAPPS) security framework, which includes but is not limited to:. Manage and enforce role‑based access control (RBAC) and least‑privilege models within CAPPS and connected systems. Design and maintain segregation‑of‑duties (SoD) rules; identify and remediate SoD conflicts across business processes. Review and validate security roles, permission sets, and custom authorizations within CAPPS and all ancillary systems. Monitor and analyze authentication, authorization, and privilege‑escalation logs for suspicious behavior and coordinate any findings with CPA Information Security Office. Oversee secure integration of third‑party apps via SAML, OAuth, OIDC, SCIM, and custom APIs. Validate CAPPS application changes, customizations, and workflows for security and compliance impact. Respond to and investigate identity‑related security incidents, including account compromise, unauthorized access, and fraud indicators. Maintain standards for security, performance, compliance, and architecture. Responsible for ensuring that all digital products and content meet WCAG 2.1 accessibility standards. This includes maintaining perceivable, operable, understandable, and robust experiences for all users, regularly reviewing content for compliance, and implementing updates or remediation whenever accessibility issues are identified. Reviewing and suggesting approval for all assigned Security Deliverables related to CAPPS Architecture, CAPPS System Development Lifecycle, Disaster Recovery, CAPPS Security Plans (SSP), and all CAPPS related Security plans related to CAPPS applications currently and planning for the future. Service Desk Support Plans, designs, develops, deploys, supports and maintains system configurations and mo