Senior Identity & Access Management; IAM Engineer
Listed on 2025-12-08
-
IT/Tech
IT Consultant, Cybersecurity
About the Opportunity
This job description is intended to describe the general nature and level of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.
The Senior Identity & Access Manager (IAM) Engineer is responsible for designing, implementing, and managing the identity and access management framework within Northeastern University. Utilizes a deep understanding of IAM technologies, security protocols, and best practices to ensure the protection of sensitive information and compliance with regulatory requirements. Leveraging identity systems including Microsoft Active Directory, Entra, Savyint, Grouper and Shibboleth, provides senior operational support to these systems in support of Single Sign-On (SSO), User Provisioning, Privileged Access Management, and Role-Based Access Control (RBAC).
Makes recommendations for, and leads the implementation of changes through a formal change management process, working with cross-functional teams to align IAM initiatives with business objectives.
Plays a critical role in shaping the security posture of the organization working with cutting-edge technologies and leading initiatives that have a significant impact on user experience, operations and security.
Applicants must be authorized to work in the United States. The University is unable to work sponsor for this role, now or in the future.
Minimum Qualifications- Bachelor's degree in computer science, Information Technology, or relevant experience
- Minimum of 7 years of experience in Sr. IAM Engineering and implementation roles.
- Extensive platform knowledge and experience working with Entra , Microsoft Active Directory, Entra Connect, Grouper, Shibboleth and Savyint, or equivalent tools.
- Extensive Experience with security protocols and standards (e.g., SAML, OAuth, OpenID Connect)
- Knowledge and experience of working with Shibboleth, Incommon Federation, or SailPoint, LDAP are nice-to-haves
- Advanced proficiency in scripting tools, such as bash, SQL, Power Shell, and Jenkins or Git Hub Actions, for automation and management tasks. Experience with automation tools and frameworks relevant to IAM is a plus
- Excellent technical and communication skills, with the ability to articulate complex IAM concepts to non-technical stakeholders. Strong analytical and problem-solving abilities. Proven track record of working in complex production environments.
:
Lead the deployment and integration of IAM technologies, leveraging Microsoft Active Directory (on-premises and Entra). Evaluate, select, and guide development of appropriate IAM tools and solutions to enhance security and user experience.
:
Create and implement operational best practices to ensure ongoing availability of identity systems.
:
Work closely with IT, security, and business teams to understand access requirements and implement appropriate controls. Provide expert guidance and mentorship to IAM team members and other IT staff.
:
Oversee the development of automation scripts and workflows (e.g., using Power Shell) to streamline provisioning and de-provisioning processes. Optimize existing IAM processes for efficiency and effectiveness.
:
Act as the highest escalation point for complex access issues not resolved by the IT Service Desk. Oversee the resolution of IAM-related incidents and problems.
Northeastern University considers factors such as candidate work experience, education and skills when extending an offer.
Northeastern has a comprehensive benefits package for benefit eligible employees. This includes medical, vision, dental, paid time off, tuition assistance, wellness & life, retirement- as well as commuting & transportation.
All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.
Compensation Grade/
Pay Type:
113S
Expected Hiring Range: $ - $
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).