"Identity Architect"

Job Details

Position Number: 002993

Functional Title: Identity Architect

Position Type: Staff

Position Eclass: EP - EHRA 12 mo leave earning

University Information: Located in North Carolina’s third largest city, UNC Greensboro is among the most diverse, learner-centered public research universities in the state, with 18,000 students in eight colleges and schools pursuing more than 150 areas of undergraduate and over 200 areas of graduate study. UNCG continues to be recognized nationally for academic excellence, access, and affordability. UNCG is ranked No. 1 most affordable institution in North Carolina for net cost by the N.Y. Times and No. 1 in North Carolina for social mobility by The Wall Street Journal — helping first-generation and lower-income students find paths to prosperity. Designated an Innovation and Economic Prosperity University by the Association of Public and Land-grant Universities, UNCG is a community-engaged research institution with a portfolio of more than $67M in research and creative activity. The University’s 2,600 staff help create an annual economic impact for the Piedmont Triad region in excess of $1B.

Primary Purpose of the Organizational Unit: Plan, design, implement and support stable and secure enterprise central and client IT systems infrastructure. ITS Enterprise Systems supports more than 20,000 students, faculty and staff by administering the campus enterprise server infrastructure, enterprise databases, and client computing infrastructure. All of the core technology services offered by the University rely on the successful design, development, implementation, growth, maintenance and monitoring of the campus systems infrastructure.

Position Summary: Identifies, designs, and implements identity, authentication, and access management & governance solutions with the goal of improving operational performance/efficiency This position is a senior level systems architect and team leadership for University’s enterprise Identity and Access Management (IAM) infrastructure and related systems. This position plays a key role in developing and executing the strategic direction for single sign-on solution, enterprise group and role management, enterprise directory and related systems to support enterprise-class services. The position leads a team of engineers with an in-depth understanding of managing the IAM infrastructure and its related integrations with external applications. This position will also be the UNCG liaison with other state and national initiatives working on IAM projects.

Minimum Qualifications: Bachelors degree or equivalent combination of education and experience

Preferred Qualifications: 8 years systems administration; 5+ years of Identity Management governance and design experience; 5+ years of successful enterprise implementation of RBAC/ABAC/PBAC principals

Recruitment Range: Salary commensurate with experience

Org #-Department: Info Technology Services - 23101

Job Open Date: 05/23/2025

For Best Consideration Date: 05/30/2025

Open Until Filled: Yes

FTE: 1.000

Type of Appointment: Permanent

Number of Months per Year: 12

FLSA: Exempt

Key Responsibility: Design, implement, and manage a comprehensive enterprise Identity and Access Management (IAM) platform architecture, focusing on single sign-on (SSO) and identity federation.

• Architect and maintain the University’s enterprise IAM infrastructure, including SSO solutions and identity federation protocols.
• Collaborate with stakeholders to integrate IAM solutions with campus applications and external systems, ensuring seamless authentication and authorization processes.
• Evaluate and implement enhancements to IAM policies, processes, and procedures to improve security, compliance, and operational efficiency.
• Serve as the tier 3 (engineering) subject matter expert for IAM-related issues, providing advanced troubleshooting and resolution for escalated incidents.
• Monitor and report on the health, performance, and security of the IAM environment to leadership on a regular cadence, recommending updates and resource needs as required.
• Act as the primary owner of the University’s IAM platform, ensuring alignment with industry standards and institutional objectives.

Key Responsibility: Establish, design and manage a highly complex enterprise authorization and enterprise access/group management platform architecture currently on utilizing Internet2 Grouper as the primary mechanism.

• This position will review and propose platform shifts in access and authorization mechanisms. Evaluates and recommends changes to compliance policies, processes and procedures to reduce or eliminate those that become ineffective or unnecessary as systems are modified or updated. This position will serve as the subject matter expert support for issues within the platform and resolve issues as they are escalated.
• The position will report back to leadership the state of the enterprise access management environment on a regular cadence and prepare for any needed updates and resourcing.
• This position is the primary owner of the Universities enterprise access management environment.

Key Responsibility: Provide Enterprise Identity & Access Management and Governance Services

• Evaluating and understanding relevant current and emerging infrastructure technologies to maintain expert level skills and knowledge.
• This position will develop and articulate to other systems architects the overarching technical architecture roadmap and participate in the setting of IAM/IGM use policies.
• Guide stakeholders and data stewards in governing the changing landscape of identities, authentication, and authorization as the functional data changes.
• Lead a team of technical staff to support the Identity and Access Management Services environment to include, but not limited to, Single Sign-on, authentication, access management, identity lifecycle management environment, and enterprise group management (EGM).
• Mentors and coaches subordinate positions for career development. In conjunction with Manager, Enterprise Systems, collaborates on work plans, performance appraisals, and develops or provides input to job descriptions of subordinates.

Key Responsibility: Manage the technical projects, documentation and standards for the Identity and Access Management Services

• Ensure technical staff adheres to standards and practices.
• Leads project management teams on supported system-related projects.
• Participates as a member of an integrated project management team on projects affecting multiple systems.