IDENTITY & ACCESS MANAGEMENT ENGINEER

The responsibilities of the Identity & Access Management Engineer will be to develop and support complex Identity and Access Management (IAM) systems and architecture initiatives by designing, coding, debugging, documenting and maintaining complex programs and system and network activities. They serve as the technical advisor for IAM projects and play an integral role in the delivery of new and improved IAM systems that are reliable and secure.  They will ensure ongoing maintenance is scheduled and completed on time, ongoing application onboarding is documented and implemented, and operational support is maintained. The IAM Engineer will ensure that any and all Identity and Access Management services are secure, available, efficient, and meet defined corporate service levels and compliance requirements.

ROLES AND RESPONSIBILITIES:
-Assists with the management of current in-house developed user provisioning system and plays a key role in the design, implementation and deployment of any new or enhanced Identity and Access Management System (IAMS).
-Develops scripts, user interfaces, and data integrations with enterprise systems. Ensures the integrity and security of user identity information by following coding best practices. 
-Coordinates the secure transfer and synchronization of institutional data between administrative applications and intranet and Cloud/SaaS applications for electronic authentication and authorization purposes. 
-Performs requirements analysis and technical planning in the design and implementation of secure applications in a multi-platform client/server environment. 
-Acts as technical liaison for identity-related application development that involves other IT units or administrative and academic departments.
-Maintains authentication and authorization databases for various intranet applications such as the provisioning system, online learning management system, ERP systems, cloud-based applications, and campus portal.
-Evaluates emerging identity management, authorization, and data integration standards such as OAuth2 and SAML.
-Participate in a 24x7 on-call engineer rotation supporting our core services
 

REQUIRED TECHNICAL SKILLS:
-5 years of experience with IDM Engineering and building Access Management Platforms and Solutions
-Experience with world class IDM/IAM suites (CA Siteminder, IBM Tivoli Identity Manager, Oracle Identity Manager, Quest One Identity, SailPoint, etc.)
-Experience with Privileged Identity and Access Management – CyberArk Privileged Identity Manager, CA Privileged Access Management, or Beyond Trust PowerBroker Privileged Access Management
-Experience in automation using PowerShell.
-Experience working in an enterprise environment with Incident Management, Change Management, and SOX controls
-Strong understanding of role-based access, least privilege and segregation of duties access control concepts,
-Programming experience: C, C++, Java, Java Script, JSON, Scripting, VB.net, SQL