Identity and Access Management Administrator

The primary purpose of this position is to participate in the technical system design, deployment, and management of ITS and customer identity and access solutions, along with maintaining a coordinated register of centrally managed attribute and role-based access controls. In addition, this position will ideate novel solutions to multi-faceted identity complexes to safeguard critical and confidential information belonging to the university. This position will participate in the discovery of new technologies and implementation and configuration of systems and applications in support and optimization of Identity Governance and Role-Based Access Control (RBAC). This position will provide knowledge of the interactions between technologies and applications across product lines.

Minimum Qualifications:

• Mid-career with Masters and 1-2 yrs experience.
• Bachelor’s and 2-4 yrs experience; or equivalent combination of education/experience.

Preferred Qualifications:

• Bachelor’s Degree with 3 – 5 years of experience in Identity and access management, or equivalent combination of education/experience.
• 5 years of working within a complex identity lifecycle management environment, including user and group synchronization.
• Working understanding of modern database schema design.
• Working understanding of MFA, conditional access, and zero-trust architecture.
• Knowledge of Single Sign-on protocols such as SAML or OIDC.
• Ability to implement federated identity management (IdP and SPs).
• 3+ years of experience with cross-platform provisioning/de-provisioning workflows.
• Working knowledge of SCIM standards.
• Proficient in RBAC and ABAC access control practices.
• Working understanding of Privileged Access Management (PAM) and the principle of least privilege.
• Working understanding of using RESTful APIs and webhooks for integrations and automation.
• Proficient in scripting languages such as PowerShell and Python.
• 5+ years of experience in a centralized access management platform.
• Proficient in DevOps and ITIL concepts.
• Experience with deploying services that make use of the Azure cloud platform.
• 5 years of domain experience in higher education or research.