Senior Identity & Access Management Engineer

Job Summary

The Senior Identity & Access Manager (IAM) Engineer is responsible for designing, implementing, and managing the identity and access management framework within Northeastern University. Utilizes a deep understanding of IAM technologies, security protocols, and best practices to ensure the protection of sensitive information and compliance with regulatory requirements. Leveraging identity systems including Microsoft Active Directory, Entra, Savyint, Grouper and Shibboleth, provides senior operational support to these systems in support of Single Sign-On (SSO), User Provisioning, Privileged Access Management, and Role-Based Access Control (RBAC).

Minimum Qualifications

• Bachelor's degree in computer science, Information Technology, or relevant experience
• Minimum of 7 years of experience in Sr. IAM Engineering and implementation roles.
• Extensive platform knowledge and experience working with Entra ID, Microsoft Active Directory, Entra Connect, Grouper, Shibboleth and Savyint, or equivalent tools.
• Extensive Experience with security protocols and standards (e.g., SAML, OAuth, OpenID Connect)
• Knowledge and experience of working with Shibboleth, Incommon Federation, or SailPoint, LDAP are nice-to-haves
• Advanced proficiency in scripting tools, such as bash, SQL, PowerShell, and Jenkins or GitHub Actions, for automation and management tasks.
• Excellent technical and communication skills, with the ability to articulate complex IAM concepts to non-technical stakeholders.

Key Responsibilities

1. Technology Implementation: Lead the deployment and integration of IAM technologies.
2. Operational Improvements: Create and implement operational best practices.
3. Collaboration and Leadership: Work closely with IT, security, and business teams.
4. Automation and Optimization: Oversee the development of automation scripts and workflows.
5. Incident Management and Support: Act as the highest escalation point for complex access issues.