ERP Security Analyst (CAPPS Systems Specialist)

Job Description This is a remote position. The ERP Security Analyst (CAPPS Systems Specialist) will support the Texas Comptroller of Public Accounts on the Centralized Accounting and Payroll/Personnel System (CAPPS) Program. This role delivers highly advanced, senior-level consultative services and technical assistance in support of CAPPS security architecture, configuration, and compliance across HR/Payroll, Financials, STARR, and all ancillary systems. The Candidate is responsible for managing and enforcing the CAPPS security framework, including role-based access control, segregation of duties, identity governance, and secure third-party integrations. The role also encompasses Level 2 Service Desk support, system configuration and maintenance, and participation in major incident management, disaster recovery, and audit activities. RESPONSIBILITIES Manage and enforce role-based access control (RBAC) and least privilege models within CAPPS and connected systems. Design and maintain segregation of duties (SoD) rules; identify and remediate SoD conflicts across business processes. Monitor and analyze authentication, authorization, and privilege escalation logs for suspicious behavior; coordinate findings with the CPA Information Security Office. Oversee secure integration of third-party applications via SAML, OAuth, OIDC, SCIM, and custom APIs. Respond to and investigate identity-related security incidents, including account compromise, unauthorized access, and fraud indicators. Review, validate, and suggest approval for all assigned security deliverables related to CAPPS Architecture, System Development Lifecycle, Disaster Recovery, and Security Plans (SSP). Plan, design, develop, deploy, support, and maintain system configurations and modifications for the CAPPS HR/Payroll application to ensure accuracy, efficiency, and policy adherence. Provide Level 2 Service Desk support, including complex ticket handling, in-depth troubleshooting, and auditable configuration activities in cooperation with the Level 3 Managed Services vendor. Actively participate in CPA's Major Incident Management (MIM) process for P1 and P2 incidents, as well as Disaster Recovery and Upgrade Testing activities. Ensure all digital products and content meet WCAG 2.1 accessibility standards, regularly reviewing for compliance and implementing remediation as needed. Requirements MINIMUM QUALIFICATIONS 10 years of extensive Texas public sector experience, directly working for or supporting a Texas state government agency. 10 years of experience performing technical activities in support of CPA application systems. 10 years of experience creating and managing a strategic roadmap by combining strong planning skills, technical insight, and effective cross-functional communication. 10 years of experience preparing materials for and conducting executive-level presentations. 10 years of experience performing technical project management activities in support of CPA's CAPPS program. 10 years of experience interpreting contractual language and integrating it into daily workflows, while consistently holding vendors accountable to contractual requirements. 10 years of extensive knowledge of and experience with data integration, data quality, and SDLC processes and methodologies. 10 years of experience in IT security and control practices. 10 years of technical experience with PeopleSoft FSCM or HCM 9.2, PeopleTools, PeopleCode, Application Designer, SQL, PS Query, SQR, Application Engine, and Oracle 11 or higher. 10 years of experience with CAPPS Central production and deployment technical support activities for more than 100 agencies and 5 Hub instances. 8 years of experience with IT service desk functions and knowledge of ITIL framework methodologies and processes. 5 years of experience serving in a security analyst role with responsibility overseeing a Managed Services provider. 5 years of experience with user role segregation of duties (SoD) in multi-tenant software applications. PREFERRED QUALIFICATIONS 10 years of experience with software and hardware management industry best practices. 10 years of experience with CPA's legacy Statewide Financial Systems production support activities. 10 years of experience developing technical specifications to support IT procurements. ADDITIONAL REQUIREMENTS The selected Candidate is required to sign several security documents and adhere to CPA's Additional Terms and Conditions (Attachment A). The Candidate must complete a minimum of 10 hours of annual professional training in a relevant area of expertise at personal expense and on personal time, unless otherwise coordinated with the CPA Supervising Manager. The Candidate's remote working location must remain within the continental United States at all times. WORK LOCATION AND SCHEDULE Location: Texas Comptroller of Public Accounts, LBJ State Office Building, 111 E. 17th Street, Austin, Texas 78711. Schedule: Monday through Friday, 8:00 AM to 5:00 PM CT, excluding State holidays; extended hours including evenings, weekends, and holidays may be required as requested and pre-approved by CPA. Work Arrangement: Telework (remote within the continental United States) Air InfoSec, LLC is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.