Identity and Access Management Developer

Job Details

SUMMARY :
Reporting to the Director, Web and Identity Management, the Identity and Access Management (IAM) Developer at Montclair State University plays a critical role in enhancing and maintaining the university's IAM solutions. The IAM Developer develops, implements, and supports systems that manage digital identities, access controls, and authentication processes. This position collaborates with university stakeholders to ensure secure and efficient access to university systems, applications, and resources while upholding security best practices and regulatory compliance within the university community. Also, the IAM Developer helps to define the future vision for how identities and assigned access is managed, enforced and reported upon across all functional business units.

PRINCIPAL DUTIES AND RESPONSIBILITIES :

• Develop automated workflows for user account provisioning and de-provisioning across multiple platforms following the university established policy for account life-cycle.
• Design, develop, and implement IAM solutions including authentication, authorization, single sign-on (SSO) services and multi-factor authentication (MFA).
• Design, develop and implement solutions for privileged access management (PAM).
• Ensure integration of IAM solutions with various on-premises and cloud-based systems and applications.
• Implement role-based access controls (RBAC) and enforce least privilege principles.
• Implement and manage federated identity solutions to enable secure, seamless access to internal and external resources.
• Support identity federation protocols, such as SAML, OAuth, OpenID Connect, and LDAP, to enhance integration with partner institutions and external service providers.
• Maintain and enhance IAM platforms to meet the evolving needs of the university.
• Assist in the development and enforcement of policies, standards, and procedures that govern access to resources, ensuring consistent and secure access.
• Analyze user activities while authenticating and accessing university resources based on audit logs and reports.
• Assist with maintaining documentation related to the role and ensure accurate reporting.
• Assist with responding to security incidents, including investigation, containment, eradication, and recovery.
• Participate in incident response reporting requirements as needed, post-incident reviews and improvement efforts to enhance the university's security posture.
• Prepare detailed reports and presentations for projects related to the role.
• Communicate with stakeholders at all levels regarding projects related to the role as needed.
• Maintain integrity and confidentiality in institutional and program operations.
• Perform other duties as assigned.

QUALIFICATIONS :

REQUIRED :

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field. In lieu of a degree, IT certifications and/or equivalent experience in an information technology role will be considered.
• Minimum two years of experience in an Identity and Access Management role.
• Minimum two years of hands-on development experience using JavaScript, Groovy, or PowerShell. Other scripting languages relevant to Identity and Access Management will be considered.
• Strong understanding of Identity Management concepts and technologies including but not limited to Identity Lifecycle Governance, Single Sign On (SSO), SAML, OAuth, ID Connect, Directory Stores (Active Directory, Entra, LDAP, and others), MFA and Federated Services.
• Excellent analytical and problem-solving skills, with the ability to manage multiple priorities and projects.
• Strong communication and interpersonal skills, with the ability to engage stakeholders at all levels.
• Ability to work independently and as part of a team in a fast-paced, dynamic environment.
• Ability to acquire new knowledge and technical skills through self-study and peer outreach.

PREFERRED :

• Direct experience with security tools and technologies related to Identity Management including ForgeRock/Ping Identity, Okta, Active Directory, Microsoft Entra, Microsoft Identity Manager.
• Previous employment in a cybersecurity operations, information security, or data privacy role.
• Experience with SIEM solutions such as Splunk, Microsoft Sentinel, IBM QRadar
• Relevant professional certifications (e.g. CISSP, CIST, CIMP, CompTIA Sec+, GSEC or any identity framework specific certificates).
• Experience in higher education or a similar complex organizational environment.
• Strong knowledge of cybersecurity frameworks, standards, and best practices. (e.g. NIST, ISO 27001, CIS Controls, etc.).
• Familiarity with regulatory requirements. (e.g. GDPR, HIPAA, FERPA, etc.).