FHLB Dallas actively pursues dedicated and hardworking individuals to be a part of our professional team. Positions are offered on an as-needed basis for all departments.  View our current opportunities by clicking the View Open Positions tab above.  

BASIC PURPOSE

This is a hands-on identity governance role focused on secure, compliant access for employees and Bank members. You’ll own the day-to-day identity lifecycle, access request workflows, and Bank-wide access reviews. You will also participate within an On-Call rotation in support of IT Security Incident Management, gaining knowledge and proficiency within the Microsoft Defender suite of tools, SIEM/SOAR (alert handling & automation), threat containment procedures, and audit‑ready evidence handling.

PRIMARY RESPONSIBILITIES:

Identity lifecycle (joiner-mover-leaver)                 

• Execute and continuously improve onboarding, role changes, and offboarding for internal users and ensuring right-first-time provisioning, timely revocation, and a clean audit trail.
• Integrate HR signals and directory attributes to drive role-based access (RBAC) updates automatically; remove obsolete entitlements when a user moves.

Entitlement Management & Access Packages (Entra)                 

• Build and administer Access Packages (catalogs, resource roles, request/approval policies, expiration, etc.) within Azure and other applicable solutions
• Govern lifecycle with automated assignment, review, and expiry to prevent stale access while reducing manual tickets.
• Operate Privileged Identity Management (PIM) solutions.  Manage role-eligibility, MFA requirements, approvals at activation, time-bound elevation, and recurring reviews to minimize standing privileged access.

Member Access & Permissions                  

• Process daily member access requests and translate verified instructions into application entitlements across Bank systems.
• Troubleshoot access/system issues and effectively collaborate with other Bank departments and personnel.
• Maintain traceable records of approvals/changes to support regulatory and audit requirements.

Application Access Administration                 

• Operate enterprise IAM platforms (e.g., Microsoft Entra ID, ADDS, and other internally-built solutions) to grant, modify, and revoke access; enforce SSO, MFA, RBAC, and Segregation of Duties policies across directories and apps.
• Standardize request/approval workflows, entitlement catalogs, and role definitions with clear SOPs.
• Perform User-Acceptance-Testing (UAT) within applications in support of deployments.
• Manage keys and secrets in support of business applications.

Access Reviews & Audit Readiness                    

• Plan, schedule, and run Access Reviews for groups, applications, and privileged roles; capture reviewer decisions and automate removals of unneeded access.
• Prepare audit evidence (reports, logs, approval histories, exceptions) to satisfy control tests and exam procedures.

Incident Response (On-Call)                    

• Participate in On-Call rotation for all IT Security related incidents; investigate, contain, and restore securely while documenting post-incident findings.
• Partner with Security Operations to correlate signals and tighten controls after lessons learned.

Compliance & Governance           

• Align identity controls to banking authentication/access guidance; maintain consistent processes that produce audit-ready artifacts.
• Track identity KPIs (time-to-provision, stale-access reduction, review completion rates) and prepare metrics/dashboards when applicable.

JOB REQUIREMENTS:

• Bachelor’s degree in computer science, IT Administration, Information Systems or related field. (In lieu of degree, 3+ years of experience required).
• Knowledge of application security processes and procedures.
• Knowledge of Identity and Access concepts and technologies to secure production and corporate access, such as: Azure Active Directory (Microsoft Entra ID), SSO, etc.
• Ability to understand and learn automation technologies and build applicable automations
• Experience and/or conceptual knowledge with a broad array of security technologies, such as firewalls, SIEM/SOAR, endpoint security, and vulnerability management solutions (Qualys, Tenable).
• Possesses understanding of concepts and knowledge in various information security areas, such as: Identity and Access Management, Security technology, Role-based Access Controls, Information Risk and Governance.
• Ability to manage multiple complex challenges in parallel, and solve them with cost effective, highly automated, efficient, and proven security technologies or controls.
• Highly detail oriented and driven to take initiative.
• Must possess excellent communications and interpersonal skills and be able to effectively work with all levels of Bank management as well as external customers.
• Applicable Information Assurance/Security certifications preferred. Experience in highly regulated environments including financial services or banking industry is preferred.
• Hands-on understanding and familiarity of Cloud security principles and technology. One or more Azure Certifications preferred.

PHYSICAL DEMANDS

The physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is routinely required to utilize cognitive ability; sit and move about the office; speak, read, listen, and write; use hands to finger, handle, or feel objects, tools or controls.   The employee is occasionally required to stand; reach with hands and arms, climb stairs; stoop, kneel, or crouch.  Specific vision abilities required by the job include close vision, distance vision, depth perception, and the ability to adjust focus. The employee may occasionally lift and/or move up to 25 pounds.   

WORK ENVIRONMENT

The work environmental characteristics described below are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable Accommodations may be made to enable individuals with disabilities to perform the essential functions.

Work is performed in a temperature-controlled office environment requiring little physical exertion.  The noise level in the work environment is neither low to moderate.  Mental concentration, attention to detail and computer use for extended periods of time are common.   Completion of complex tasks under deadline pressure may be required. This position may, on occasion, also require evening and weekend work based on business needs.  Interruptions may occur. 

FHLB Dallas Offers a Professional, Inclusive Culture

FHL Bank Dallas employees are committed to and exemplify the following principles:

• Service to our members is first and foremost
• All business will be conducted honestly and ethically
• Each employee contributes to customer service by directly serving our members or supporting those who do
• Interaction with members should focus on building professional relationships and helping customers achieve their goals
• Cooperation and teamwork throughout and across all levels of FHLB Dallas are essential to its effectiveness
• Colleagues and members will be treated with the utmost respect and dignity

FHLB Dallas provides equal employment opportunity to all individuals without regard to race, religion, color, sex, age, marital status, ancestry, veteran status, disability, or national origin. FHLB Dallas will consider for employment all persons on an individual basis consistent with job-related criteria without regard to visible and non-visible disabilities. Equal opportunity applies to all employment practices, including recruitment, screening, hiring, compensation and training, as well as other conditions and privileges of employment.