Identity and Access Management Administrator

Position Summary

The primary purpose of this position is to participate in the technical system design, deployment, and management of ITS and customer identity and access solutions, while maintaining a coordinated register of centrally managed attribute and role‑based access controls. This role involves ideating novel solutions to complex identity problems to safeguard critical university information and participating in the discovery, implementation, and configuration of systems that support Identity Governance and Role‑Based Access Control (RBAC).

This position examines external and internal technology trends and communicates alternative approaches to internal staff. By leveraging in‑depth knowledge of software engineering, cloud technologies, and data engineering, the incumbent will define target architectures, patterns, and processes that support customer identity and access solutions. The role also leads tool and technology selection, drives standardization and reuse of industry‑leading technology, and guides the evaluation and selection of application packages to meet solution requests and university needs.

Collaboration with ITS Enterprise Systems management ensures guidelines and standards align with the university’s long‑term strategies, while providing technical direction to project teams and translating technical concepts into clear, understandable terms.

• Mid‑career with a Master’s degree and 1–2 years of experience.
• Bachelor’s degree and 2–4 years of experience; or equivalent combination of education and experience.

• Bachelor’s degree with 3–5 years of experience in identity and access management, or equivalent education and experience.
• 5 years of experience in a complex identity lifecycle management environment, including user and group synchronization.
• Working knowledge of modern database schema design.
• Understanding of MFA, conditional access, and zero‑trust architecture.
• Knowledge of SAML or OIDC single‑sign‑on protocols.
• Ability to implement federated identity management (IdP and SPs).
• 3+ years of experience with cross‑platform provisioning/de‑provisioning workflows.
• Working knowledge of SCIM standards.
• Proficient in RBAC and ABAC access‑control practices.
• Knowledge of PAM and the principle of least privilege.
• Experience with RESTful APIs and webhooks for integrations and automation.
• Proficiency in scripting languages such as Power Shell and Python.
• 5+ years in a centralized access management platform.
• Proficient in Dev Ops and ITIL concepts.
• Experience deploying services on the Azure cloud platform.
• 5 years of domain experience in higher education or research.

Salary commensurate with experience

• Serve as an active team member in the selection, application, analysis, implementation, and management of technology to support the provisioning and deprovisioning of identities that interact with the institution’s electronic resources.
• Seamlessly integrate solutions with technically complex systems that have a broad enterprise‑wide impact.
• Assist in translating functional goals to technical plans.
• Provide feedback on variance from set standards.
• Assist with development, implementation, and support of RBAC.
• Ensure all evidence of authorization is documented and archived according to internal standards.
• Manage directory account permissions via RBAC.
• Act as the subject‑matter expert for Identity Governance and RBAC.

• Assist in long‑term project planning and operation planning in the institution’s IAM environment.
• Prepare or maintain project and operational tasks that accompany the appropriate development/management lifecycle.
• Develop and maintain detailed documentation on standard operating procedures, system configurations, and technical settings for internal team use, end‑user support, and other ITS teams as needed.
• Coordinate with stakeholders to understand role‑specific requirements and implement solutions accordingly.
• Generate reports to perform in‑depth analysis and data collection for IAM‑related issues.
• Perform regular security assessments…