Identity Infrastructure Engineer

Responsibilities

• Collect requirements, recommend solutions, configure software, and create scripts to manage and maintain the enterprise account lifecycle management infrastructure and software
• Develop, configure, maintain, and administer enterprise identity and security systems including directory services (Active Directory), cloud IAM solutions (EntraID), single sign-on services, multi-factor authentication systems, attribute-based access controls, password management solutions, and others
• Develop and deploy continuous integration/deployment pipelines, container orchestration, script-based automation, and software solutions to support IAM services and applications as required
• Provide advice, consultation, training, and tooling to campus partners wishing to take advantage of the IAM services enumerated above
• Serve as a primary subject expert for one or more of the following technologies: Public Key Infrastructure and certificates, Microsoft Active Directory, Microsoft Identity Manager, Single Sign-On services including saml2 and Open ID Connect, Microsoft EntraID, Attribute-Base Access Control using groups, scripting and automation, Apache/Tomcat/IIS operations
• Utilize continuous integration/deployment pipelines to manage software configurations, deploy and update applications, and deliver security patches to IAM applications both on-premises and in cloud services
• Operate as a secondary subject matter expert for one or more of the above
• Troubleshoot and resolve authentication and authorization application problems, access control issues, and other IAM support needs as required
• Document code and configurations
• Respond to requests and incidents raised in the IT Service Management system
• Participate in after-hours on-call rotation
• Ensure services and systems are reliably monitored for security and performance
• Ensure compliance with change management and other administrative policies

Qualifications

• Five (5) years of systems development experience, including analysis, design, implementation, and operations, including three (3) years of experience with IAM technologies such as user provisioning, authentication, authorization, and access management
• Experience with Microsoft Active Directory, Single Sign-On (saml2, OIDC), Attribute-Based Access Management (directory groups, roles, and similar), and/or Microsoft EntraID
• Strong collaboration and teamwork in the pursuit of operational excellence
• The ability to develop ideas and strategies to communicate with a diverse user base having various levels of technical proficiency
• The ability to prioritize tasks, self-direct, operate remotely, and achieve goals with only general supervision
• A dedication to career and professional development both for oneself and one’s peers and colleagues