Senior Identity & Access Management Engineer (IT Security Specialist 3) - Provisional

About the role

This position encompasses professional and responsible technical consultative and/or administrative work. Under administrative direction of a university IT manager, with broad latitude of independent action or decision, serves as subject matter expert on IT security, identity, and access infrastructure; provides IT security architectural guidance; designs security solutions; conducts IT risk assessments and recommended mitigating solutions.

Responsibilities

• Administers and supports enterprise IAM platforms, authentication services, and access management solutions.
• Designs, implements, and maintains Single Sign-On integrations utilizing SAML, OAuth, OpenID Connect, and related federation technologies.
• Serves Multi-Factor Authentication (MFA), RADIUS, Eduroam, and related authentication infrastructure.
• Develops Python automation and SQL-based reporting to improve operational efficiency, auditing, and security monitoring.
• Manages LDAP directory services, identity synchronization, provisioning, and identity lifecycle processes.
• Performs advanced troubleshooting of authentication, authorization, directory, network, and application integration issues.
• Conducts security reviews of authentication configurations and access controls to ensure compliance with university security standards.
• Participates in incident response, root cause analysis, and remediation activities involving identity and access management services.
• Collaborates with Information Security, Infrastructure Services, Networking, Application Support, and campus stakeholders to implement secure authentication solutions.
• Develops and maintains technical documentation, operational procedures, and security standards related to IAM services.
• Provides technical leadership and guidance for IAM-related projects and initiatives.

Requirements

A baccalaureate degree in computer science, engineering or a related field from an accredited college or university and five (5) years of satisfactory full-time experience providing IT security architectural guidance, designing security solutions, and/or conducting IT risk assessments and recommended mitigating solutions; or A baccalaureate degree from an accredited college or university and six (6) years of satisfactory full-time experience as described in “1” above; or A high school diploma or its educational equivalent and ten (10) years of satisfactory full-time experience as described in “1” above; or Education and/or experience which is equivalent to "1," "2" or "3" above.

Qualifications

• College Education (undergraduate Credits) May Substitute For Up To Four (4) Years Of The Required Experience In "3" Above On The Following Basis: 30 to 59.9 semester credits substitute for 1 year of experience; or 60 to 89.9 semester credits substitute for 2 years of experience; or 90 to 119.9 semester credits substitute for 3 years of experience; or 120 or more semester credits substitute for 4 years of experience.
• Graduate Credits In Information Technology, Computer Science Or a Related Field May Substitute For Up To Two (2) Years Of Experience In "1" Or "2" Above On The Following Basis: 15 to 29.9 graduate credits substitute for 1 year of required experience; or 30 or more graduate credits substitute for 2 years of required experience.
• Each Of The Following Certifications May Substitute For One (1) Year Of The Required Experience In "1," "2" Or "3" Above: Certified Information Systems Security Professional (CISSP) issued by ISC2; and/or Certified Ethical Hacker (CEH) issued by EC-Council; and/or CompTIA Security+ issued by CompTIA; and/or Certified Information Security Manager (CISM) issued by ISACA; and/or Certified Information Security Auditor (CISA) issued by ISACA; and/or GIAC Security Essentials (GSEC) issued by GIAC; and/or Certified Cloud Security Professional (CCSP) issued by ISC2.

Benefits

BENEFITS CUNY offers a comprehensive benefits package to employees and eligible dependents based on job title and classification. Employees are also offered pension and Tax-Deferred Savings Plans. Part-time employees must meet a weekly or semester work hour criteria to be eligible for health benefits. Health benefits are also extended to retirees who meet the eligibility criteria.

Compensation

Level 3 Incumbent Minimum: $124,471

How to Apply

For full consideration, submit a cover letter and resume online via CUNY's web-based job system, addressing how your experience and credentials meet the responsibilities and qualifications outlined. The direct link to the job opening from external sources is: here. Current CUNY employees must apply through CUNYfirst Employee Self Service using their login credentials. After you login, click the Careers tile on the Employee Self Service Menu page to view job openings.