IAM PAM & SSO Senior Analyst

Information Technology Services Working alongside our many campus partners, ITS fosters a collaborative, future-focused environment that empowers students, faculty, staff, researchers, and the broader community. We are always innovating for what’s next. Through seamless digital experiences and robust security, we build a smarter, stronger, and secure USC for all. Learn more at About ITS Search by Keyword Location When autocomplete results are available use up and down arrows to review and enter to select. Touch device users, explore by touch or with swipe gestures. Radius Select Radius 5 miles 15 miles 25 miles 35 miles 50 miles IAM PAM & SSO Senior Analyst Los Angeles, CA Apply Current employees apply here Job ID REQ20181215 Category Information Technology Services Helpful Information for Applicants External Applicants Internal Applicants (Current USC Employees) Strengthen Identity Security at USC USC is expanding its Cybersecurity IAM capabilities to help protect the university's people, systems and information in an increasingly complex threat environment. As the IAM PAM & SSO Senior Analyst, you will play a key technical role in designing, implementing and supporting enterprise identity solutions across Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA) and related Identity and Access Management (IAM) services. This is an opportunity for an experienced IAM professional to work at the intersection of cybersecurity, identity engineering and enterprise technology within a major research university. You will partner with application, infrastructure and cybersecurity teams to deliver secure, scalable and reliable identity services while helping strengthen the technology foundation that supports USC's academic, research and operational mission. The position reports to the PAM & SSO Services Manager and is based at USC's CAL location in a hybrid work environment. Job Accountabilities Designs, implements, enhances, and maintains PAM, SSO, MFA, and related IAM solutions to support secure, reliable, and scalable identity services. Analyzes business and technical requirements to configure, integrate, and optimize IAM platforms that support authentication, authorization, and privileged access capabilities. Develops reusable technical standards, configurations, and implementation patterns that improve consistency, reliability, and operational supportability across IAM services.Partners with application and infrastructure teams to integrate enterprise systems with PAM, SSO, MFA, and related IAM services. Supports onboarding of new applications and services while ensuring adherence to established security and technical requirements.Troubleshoots and resolves complex issues involving identities, systems, access, accounts, authentication, authorization, entitlements, permissions, privileged access, and secrets management services. Analyzes system design weaknesses, integration challenges, and operational issues to determine appropriate solutions. Assesses impact, risk, and priorities to recommend and implement corrective actions, perform root cause analysis, and improve service reliability, security, and operational effectiveness.Performs platform administration activities including upgrades, patching, monitoring, tuning, maintenance, and system health assessments. Identifies opportunities to improve automation, operational efficiency, service availability, and user experience.Develops and maintains technical documentation, configuration standards, architecture artifacts, operational procedures, and support runbooks. Ensures documentation accurately reflects implemented solutions and supports consistent administration, troubleshooting, and ongoing maintenance of IAM services.Provides technical guidance and knowledge transfer to team members, operational support personnel, and technology stakeholders. Shares subject matter expertise and promotes adoption of established IAM standards, procedures, and best practices to improve operational effectiveness and service support.Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.Researches emerging IAM technologies, vendor capabilities, and industry practices to identify service improvement opportunities. Recommends technical enhancements that strengthen the security, reliability, scalability, and supportability of identity services. Minimum Qualifications Great candidates for the position of IAM PAM & SSO Senior Analyst will meet the following qualifications: Bachelor's degreeBachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)Combined experience/education as substitute for minimum education4 years in Identity and Access Management.Combined experience/education as substitute for minimum work experienceHands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., CyberArk, HashiCorp, Delinea/Thycotic, Microsoft Entra, ForgeRock, Shibboleth, Duo).Proficiency within a Unix command line.Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).Excellent written and verbal communication skills; comfortable driving requirements gathering, architectural discussions and project reporting with non-technical business stakeholders.Maintain technical documentation including architecture diagrams, decision records, and runbooks. Preferred Qualifications 6 or more years of experience in Identity and Access Management.Hands-on experience with Identity Governance and Administration (IGA) platforms such as SailPoint IIQ or ISC and Saviynt.Experience with enterprise directory solutions such as Microsoft Entra and Oracle Unified Directory, as well as identity verification technologies such as Persona or 1Kosmos.Experience with IAM within higher education or another complex, decentralized environment such as healthcare, technology, media and telecommunications, or financial services.Understanding of Zero Trust architecture, identity-based attack techniques and modern IAM controls.Experience leading enterprise identity transformations or directory modernization programs, including large-scale migration from legacy platforms.Demonstrated ability to establish and gain visibility into service accounts and secrets across hybrid cloud and on-premises environments.Experience working with professional services firms, such as Big Four firms, and/or IAM software vendors.CISSP certification or similar. In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC’s Unifying Values (opens in new window) of integrity, excellence, community, well-being, open communication, and accountability. Salary And Benefits The annual base salary range for this position is $124,765 - $154,478. When extending an offer of employment, the University of Southern California considers factors such as, but not limited to, the scope and responsibilities of the position, the candidate's work experience, education/training, key skills, internal peer equity, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations. To support faculty and staff well-being, USC provides benefits-eligible employees with a broad range of benefits and perks to help protect their and their dependents’ health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package. You can learn more about USC’s comprehensive benefits here (opens in new window). Ready to Make an Impact? If you are an experienced IAM professional looking to work at the intersection of cybersecurity, identity engineering and enterprise technology, consider joining USC's Cybersecurity IAM team. Apply today and bring your expertise to a role that will help strengthen secure access across one of the nation's leading research universities. USC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristic protected by law or USC policy. USC observes affirmative action obligations consistent with state and federal law. Addtional Education Requirements Combined experience/education as substitute for minimum education Addtional Experience Requirements Combined experience/education as substitute for minimum work experience Preferred Certifications: Certified Information Systems Security Professional (CISSP) certification or similar. Job ID REQ20181215 Posted Date 10/08/2026 Apply Current employees apply here SHARE FacebookXLinkedInEmail Related Content Mission Statement USC’s central mission is the development of human beings and society as a whole through the cultivation and enrichment of the human mind and spirit. Learn More July 28, 2025 Mission & Values Blog - Hub Page Related Content Our Communities Rooted in LA, USC partners with local communities to uplift education, well-being, and opportunity across Southern California. Learn More July 28, 2025 Culture & Community Blog - Hub Page Related Content USC Today Explore the latest stories of impact, innovation, and Trojan spirit shaping USC and the world beyond. Learn More July 28, 2025 USC News Blog - Hub Page Related Content Jobs for You Featured JobsSaved JobsViewed Jobs Postdoctoral Scholar - Research Associate Los Angeles, California Clinical Lab Scientist - Laboratory - Part Time 8 Hours Days (6:00AM to 2:30PM) (Non-Union, Non-Exempt) Arcadia, California IAM PAM & SSO Senior Analyst Los Angeles, California Postdoctoral Scholar – Research Associate Los Angeles, California No Saved Jobs. View All Jobs Postdoctoral Scholar - Research Associate Los Angeles, California Clinical Lab Scientist - Laboratory - Part Time 8 Hours Days (6:00AM to 2:30PM) (Non-Union, Non-Exempt) Arcadia, California Sign Up for Job Alerts Don't see what you're looking for? Sign up and we'll notify you when new roles become available. Job Alerts Don't see what you’re looking for? Sign up and we'll notify you when roles become available. All fields are required. First name* Last name* Email address* Interested InSelect a Job Category OR School/Division from the list of options. Finally, click "Add" to create your job alert. Job CategorySelect a Job CategoryAcademic AdvisingAcademic Advising and Career CounselingAccounting, Finance and BankingAdministrationAdministrative SupportAthleticsAuxiliary ServicesBiomedicalBusiness and Financial ManagementChild Care ServicesClinical AdministrationComplianceData AnalysisDentistryDevelopment and FundraisingEnvironmental Health and SafetyFacilities ManagementFacilities Management and ConstructionFacultyFaculty and TeachingFaculty DevelopmentGeneticsGrants Administration & Sponsored ProgramsHealth and Medical ServicesHuman ResourcesInformation TechnologyInformation Technology ServicesInstitutional Research and PlanningKeck Medicine of USCLaboratoryLaboratory and ResearchMarketing and EventsNursingNursing ServicesPharmacyPhysician AssistantPostdoctoralPublic SafetyRadio BroadcastResearch and Clinical SupportResearch and Grants AdministrationSocial WorkSpeech TherapyStudent Support ServicesSupport ServicesTechnicianTherapy and RehabilitationUSC Job FamiliesWhen autocomplete results are available use up and down arrows to review and enter to select. Touch device users, explore by touch or with swipe gestures. School/DivisionSelect OneKeck Medicine of USCKeck School of MedicineAuxiliary ServicesHerman Ostrow School of Dentistry of USCDornsife College of Letters, Arts and SciencesSol Price School of Public PolicyGould School of LawHerman Ostrow School of DentistryMarshall School of BusinessViterbi School of EngineeringUniversity RelationsUSC Credit UnionHuman Resources, Ethics, and ComplianceAlfred E. Mann School of Pharmacy and Pharmaceutical SciencesEnrollment ServicesFacilities Management ServicesSchool of ArchitectureKeck School of Medicine of USCAdministrative OperationsAnnenberg School for Communication and JournalismCapital ConstructionDworak-Peck School of Social WorkFinancial and Business ServicesInformation Technology ServicesSOWKUSC Keck School of MedicineUniversity AdvancementBovard CollegeCommunicationsIovine and Young AcademyLeonard Davis School of GerontologyOffice of ResearchOffice of the ProvostRossier School of EducationAt USC Arcadia Hospital every team member of our 348-bed hospital strives to provide an exceptional patient experience while AthleticsFacilities Planning and ManagementKaufman School of DanceKeck School Of MedicineLibrariesPresidentRoski School of Art and DesignSchool of Cinematic ArtsThornton School of MusicUSC Dornsife College of Letters, Arts and Sciences Information Technology Services, Los Angeles, California, United StatesRemove Confirm Email By signing up, I acknowledge I have read the USC privacy policy , and I wish to receive email and SMS communications. I understand I can opt-out from receiving email and SMS communications at any time. IAM PAM & SSO Senior Analyst Los Angeles, CA Apply Current employees apply here Job ID REQ20181215 Category Information Technology Services Helpful Information for Applicants External Applicants Internal Applicants (Current USC Employees) Strengthen Identity Security at USC USC is expanding its Cybersecurity IAM capabilities to help protect the university's people, systems and information in an increasingly complex threat environment. As the IAM PAM & SSO Senior Analyst, you will play a key technical role in designing, implementing and supporting enterprise identity solutions across Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA) and related Identity and Access Management (IAM) services. This is an opportunity for an experienced IAM professional to work at the intersection of cybersecurity, identity engineering and enterprise technology within a major research university. You will partner with application, infrastructure and cybersecurity teams to deliver secure, scalable and reliable identity services while helping strengthen the technology foundation that supports USC's academic, research and operational mission. The position reports to the PAM & SSO Services Manager and is based at USC's CAL location in a hybrid work environment. Job Accountabilities Designs, implements, enhances, and maintains PAM, SSO, MFA, and related IAM solutions to support secure, reliable, and scalable identity services. Analyzes business and technical requirements to configure, integrate, and optimize IAM platforms that support authentication, authorization, and privileged access capabilities. Develops reusable technical standards, configurations, and implementation patterns that improve consistency, reliability, and operational supportability across IAM services.Partners with application and infrastructure teams to integrate enterprise systems with PAM, SSO, MFA, and related IAM services. Supports onboarding of new applications and services while ensuring adherence to established security and technical requirements.Troubleshoots and resolves complex issues involving identities, systems, access, accounts, authentication, authorization, entitlements, permissions, privileged access, and secrets management services. Analyzes system design weaknesses, integration challenges, and operational issues to determine appropriate solutions. Assesses impact, risk, and priorities to recommend and implement corrective actions, perform root cause analysis, and improve service reliability, security, and operational effectiveness.Performs platform administration activities including upgrades, patching, monitoring, tuning, maintenance, and system health assessments. Identifies opportunities to improve automation, operational efficiency, service availability, and user experience.Develops and maintains technical documentation, configuration standards, architecture artifacts, operational procedures, and support runbooks. Ensures documentation accurately reflects implemented solutions and supports consistent administration, troubleshooting, and ongoing maintenance of IAM services.Provides technical guidance and knowledge transfer to team members, operational support personnel, and technology stakeholders. Shares subject matter expertise and promotes adoption of established IAM standards, procedures, and best practices to improve operational effectiveness and service support.Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.Researches emerging IAM technologies, vendor capabilities, and industry practices to identify service improvement opportunities. Recommends technical enhancements that strengthen the security, reliability, scalability, and supportability of identity services. Minimum Qualifications Great candidates for the position of IAM PAM & SSO Senior Analyst will meet the following qualifications: Bachelor's degreeBachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)Combined experience/education as substitute for minimum education4 years in Identity and Access Management.Combined experience/education as substitute for minimum work experienceHands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., CyberArk, HashiCorp, Delinea/Thycotic, Microsoft Entra, ForgeRock, Shibboleth, Duo).Proficiency within a Unix command line.Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).Excellent written and verbal communication skills; comfortable driving requirements gathering, architectural discussions and project reporting with non-technical business stakeholders.Maintain technical documentation including architecture diagrams, decision records, and runbooks. Preferred Qualifications 6 or more years of experience in Identity and Access Management.Hands-on experience with Identity Governance and Administration (IGA) platforms such as SailPoint IIQ or ISC and Saviynt.Experience with enterprise directory solutions such as Microsoft Entra and Oracle Unified Directory, as well as identity verification technologies such as Persona or 1Kosmos.Experience with IAM within higher education or another complex, decentralized environment such as healthcare, technology, media and telecommunications, or financial services.Understanding of Zero Trust architecture, identity-based attack techniques and modern IAM controls.Experience leading enterprise identity transformations or directory modernization programs, including large-scale migration from legacy platforms.Demonstrated ability to establish and gain visibility into service accounts and secrets across hybrid cloud and on-premises environments.Experience working with professional services firms, such as Big Four firms, and/or IAM software vendors.CISSP certification or similar. In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC’s Unifying Values (opens in new window) of integrity, excellence, community, well-being, open communication, and accountability. Salary And Benefits The annual base salary range for this position is $124,765 - $154,478. When extending an offer of employment, the University of Southern California considers factors such as, but not limited to, the scope and responsibilities of the position, the candidate's work experience, education/training, key skills, internal peer equity, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations. To support faculty and staff well-being, USC provides benefits-eligible employees with a broad range of benefits and perks to help protect their and their dependents’ health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package. You can learn more about USC’s comprehensive benefits here (opens in new window). Ready to Make an Impact? If you are an experienced IAM professional looking to work at the intersection of cybersecurity, identity engineering and enterprise technology, consider joining USC's Cybersecurity IAM team. Apply today and bring your expertise to a role that will help strengthen secure access across one of the nation's leading research universities. USC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristic protected by law or USC policy. USC observes affirmative action obligations consistent with state and federal law. Addtional Education Requirements Combined experience/education as substitute for minimum education Addtional Experience Requirements Combined experience/education as substitute for minimum work experience Preferred Certifications: Certified Information Systems Security Professional (CISSP) certification or similar. Job ID REQ20181215 Posted Date 10/08/2026 Apply Current employees apply here