Identity and Access Management Administrator

999595

Identity and Access Management Administrator

Staff

EP - EHRA 12 mo leave earning

Located in North Carolina’s third largest city, UNC Greensboro is among the most diverse, learner-centered public research universities in the state, with nearly 18,000 students in eight colleges and schools pursuing more than 150 areas of undergraduate and over 200 areas of graduate study. UNCG continues to be recognized nationally for academic excellence, access, and affordability. UNCG is ranked No. 1 most affordable institution in North Carolina for net cost by the N.Y. Times and No. 1 in North Carolina for social mobility by The Wall Street Journal — helping first-generation and lower-income students find paths to prosperity. Designated an Innovation and Economic Prosperity University by the Association of Public and Land-grant Universities, UNCG is a community-engaged research institution with a portfolio of more than $67M in research and creative activity. The University’s 1,100 faculty and 1,700 staff help create an annual economic impact for the Piedmont Triad region in excess of $1B.

Plan, design, implement and support stable and secure enterprise central and client IT systemsinfrastructure. ITS Enterprise Systems supports more than 21,000 students, faculty, and staff byadministering and/or supporting the campus enterprise server infrastructure, enterprise databases, and client computing infrastructure. All the core technology services offered by the University rely on the successful design, development, implementation, growth, maintenance, and monitoring of the campus systems infrastructure.

The primary purpose of this position is to participate in the technical system design, deployment, and management of ITS and customer identity and access solutions, along with maintaining a coordinated register of centrally managed attribute and role-based access controls. In addition, this position will ideate novel solutions to multi-faceted identity complexes to safeguard critical and confidential information belonging to the university. This position will participate in the discovery of new technologies and implementation and configuration of systems and applications in support and optimization of Identity Governance and Role Based Access Control (RBAC). This position will provide knowledge of the interactions between technologies and applications across product lines.

This position examines external and internal technology, long-term trends, and implications of alternative approaches, and articulates those concepts to other internal staff. This position will utilize in-depth knowledge of software engineering, cloud technologies and data engineering to define target architectures, patterns, and processes in support of customer identity and access solutions. This position will lead and/or support tool and technology selection and drive standardization and reuse of industry leading technology across the organization. This position will lead and/or support the evaluation and selection process for application packages to satisfy solution requests and related university needs.

This position collaborates with ITS Enterprise Systems management in setting guidelines and standards to ensure systems are consistent with ITS’ and UNCG’s long-term strategies. This position provides technical direction to project teams and understands and can explain the interrelationship of multiple concepts and can translate these concepts, ideas, and situations into clear, understandable, and simple terms.

• Bachelor’s Degree with 3 – 5 years of experience in Identity and access management or equivalent combination of education/experience
• 5 years of working within a complex identity lifecycle management environment, including user and group synchronization
• Working understanding of modern database schema design
• Working understanding of MFA, conditional access, and zero trust architecture
• Knowledge of Single Sign-on protocols such as SAML or TGT
• Ability to implement federated identity management (IdP and SPs)
• 3+ years of experience with cross-platform provisioning/de-provisioning workflows
• Working knowledge of SCIM standards
• Proficient in RBAC and ABAC access control practices
• Working understanding of PAM and least privilege principles
• Working understanding in using RESTfun APIs and webhooks for integrations and automation
• Proficient in scripting languages such as PowerShell and Python

• 5+ years of experience in a centralized access management platform
• Proficient in DevOps and ITIL concepts
• Proficient knowledge in (a) cloud platform
• 5 years of experience in a higher education complex identity lifecycle environment, including user and group synchronization

Salary commensurate with experience

Info Technology Services - 23101

09/04/2024

09/11/2024

Yes

1.000

Permanent

12

Exempt

50%

Technical Solution Development

• Serve as an active team member in the selection, application, analysis, implementation, and management of technology to support the provisioning and deprovisioning of identities that are needed to interact with the electronic resources of the institution.
• Seamlessly integrate solutions with technically complex systems that have broad enterprise-wide impact.
• Assist in the translation of functional goals to technical plans.
• Provide feedback to team members, customers, and leadership regarding variance from set standards.
• Assist with the development, implementation, and support of RBAC.
• Ensure all evidence of authorization is documented and archived according to internal standards.
• Manage directory account permissions via RBAC.
• Act as the subject matter expert for Identity Governance and RBAC

20%

Technical Planning, Organization, and Reporting

• Assist in long-term project planning and operation planning in the institutions’ IAM environment.
• Prepare or maintain project and operational tasks that accompany the appropriate development/management lifecycle.
• Develop and maintain detailed documentation on standard operating procedures, system configurations, and technical settings for internal team use, end user support, and other ITS teams as needed.
• Coordinate with stakeholders to understand role-specific requirements and implement solutions accordingly.
• Generate reports to perform in-depth analysis and data collection for issues associated with IAM.
• Perform regular security assessments and audits to identify and mitigate vulnerabilities.

15%

Technical Support

• Apply knowledge and skills to analyze and troubleshoot complex problems.
• Support ITS and University IT team members in resolving complex technical issues related directly or indirectly to customer identity and access solutions.
• Develop and maintain technical documentation in a timely manner.
• Provide second-level support to end-users, addressing and resolving issues related to system access and performance.

10%

Customer Service

• Promote a positive customer relationship.
• Assist customers with defining requirements, solutions, and responding to issues in an effective manner.
• Assist in training ITS and University IT team members on system functionalities and best practices.

5%

Professional Development

• Maintain a thorough knowledge of the IAM / IAG landscape.
• Stay up to date on technology trends, changing tools, mandates, policies, and standards.
• Attend professional development sessions, where applicable and cost-effective – which may include off­site week-long and/or virtual training sessions.

Hand Movement-Repetitive Motions - F, Reading - f, Writing - f, Hearing - f, Talking - f

Inside - c