IT Platform Engineer, Identity & Access Management Engineer

Position Title:

IT Platform Engineer, Identity & Access Management Engineer

Position Number: JR103412

This position is available within the University of Maryland’s Division of Information Technology (DIT). Identity and Access Management (IAM) systems are critical to getting people access to network and application resources, and to protecting valuable campus resources. The IAM team designs, develops, and integrates systems to ensure that account provisioning, authentication, and authorization meet the high-standards necessary to protect business, academic, and user data.

The IAM team also works closely with other Big 10 universities, InCommon, and Internet2 to ensure UMD is following global standards.

As a member of the IAM team, the Identity Management Engineer is responsible for installation, upgrades, integration, optimization, and project/operational support of the central IAM systems supporting the University of Maryland campus.

Working collaboratively with other IAM staff, Platform Services, and other operational units, this role functions as a forward-thinking Engineer and administrator who can also solve complex day-to-day IT problems. This person will need knowledge of application development and support with either work-related or educationally-related experience. This person will need an understanding of managing user identities and user access to system resources based on IAM best practices, as well as design and deploy unique solutions based on application needs.

The Engineer is responsible for the ongoing development, deployment, and support of the campus IAM systems, ensuring established standards are followed, verifies that the proper versions of the software infrastructure are being used, as well as ensures that applications take advantage of emerging functionality that increases technical productivity or provides value-added new services.

This position is considered essential and may be required to work at the normal work location or an alternative location during a major catastrophic event, weather emergency, or other operational emergency to help maintain the continuity of University services.

This position may be subject to being on call 24/7 during scheduled time periods.

Predominantly operates in an office environment. Some periods may be spent in computer rooms for installation, testing, and troubleshooting. Some work (less than 5%) requires moving and lifting of server equipment.

N/A

Education: Bachelor’s degree from an accredited college or university.

Experience: Three (3) years of professional experience implementing and managing enterprise solutions.

Other: Additional work experience as defined above may be substituted on a year for year basis for up to four (4) years of the required education.

• Knowledge of applications support, servers, storage, workstations, middleware, private and public clouds, and the physical facilities that support applications and business processes.
• Skill in oral and written communication.
• Skill in the use of office productivity software such as Office 365 or Google Work spaces.
• Ability to follow directions from more senior team members but also able to work independently.
• Ability to effectively manage workload and deliver assignments on time.

Preferences: Bachelor's Degree preferably in computer science or related field.

Experience in enterprise identity management systems.

At least 3 years’ experience in any of the following technologies:

• SAML, CAS, or OIDC implementations
• Group management systems (e.g. Active Directory/LDAP)
• Commercial Identity management platforms such as Fischer Identity
• Designing or maintaining permissions and roles for large enterprise applications such as an ERP or CRM

Proficiency in an object-oriented programming language such as Java or Python, including a strong understanding of design patterns and best practices for building scalable and maintainable applications.

Knowledge of identity best practices:
Role-based Access Control (RBAC), Zero Trust Least Privilege,…