Computing Support Services: Identity and Access Management Architect

Position Title: Computing Support Services: Identity and Access Management Architect

Department: 6710|Computing Support Services

Responsibilities:
Position Summary
The Identity and Access Management Architect will develop technical strategy and guide implementations of IT identity authentication and authorization related services that align to institutional priorities and enable research, academic, and administrative processes. This role aligns with the University’s cloud initiatives, specifically setting the direction for IAM as it relates to cloud. 

The individual in this role must be able to understand and interpret identity and access management strategies and direction.  Further, the person must be able to bring together key tenets of Information Security to the IAM cloud strategies and develop technical security solutions that properly align. The Architect will contribute to the overall effort of the IAM direction of the university.

Key Responsibilities:
•Subject-matter expertise across all IAM topics as it relates to both cloud and on-premises enterprise technology, and the relationship between the architectures.
•Leads discussions on IAM architecture, process, and governance development. 
•Drives the adoption of Authentication and Authorization reference architectures for existing, new, and emerging IAM technologies.
•Provides advanced architecture and engineering support to automate and administrator identity and compliance requirements into all enterprise information systems.
•Drives planning and execution of identity management roadmaps and technology enhancements.
•Creates and maintains standards surrounding documentation related to identity processes, procedure, and infrastructure. 
•Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices, and management approved standards.  
•Defines and documents RBAC to enable access management for Azure/Active directory resources.
•Develops Azure IAM policies, Standardizes and automates IAM activities, implements best practices, automating processes and troubleshooting issues.
•Automates provisioning of IAM and network constructs such as user provisioning to roles and entitlements, access roles, Security groups, NATs, KMS VPC, NACLs etc.
 
Knowledge, Skills, and Experience Requirements:
•Advanced knowledge of identity technologies and concepts.
•Strong understanding of Identity and Access Management functionalities, Authentication (Single Sign On, Federated Login, Multifactor, Biometric), Authorization, RBAC, Access and policy Governance and Compliance.
•Experience architecting IAM solutions within Microsoft Azure, Amazon Web Services (AWS) and, preferably, other cloud providers.
•Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth.
•Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
•In-depth experience with Microsoft Azure, particularly Azure AD and architecture designs connecting Azure to enterprise infrastructure.
•Experience planning and implementing an Organizational Unit (OU) structure, as well as corresponding Group Policy configuration.
•Experience with ADFS and other Federation technologies.
•Experience with Azure Active Directory, O365 and Synchronization of entities between On-Premise and Cloud Directories.
•Hands on experience working with Windows server technologies, Linux servers with Bash and PowerShell scripting.
•Experience gained through college degree programs and/or certifications in the listed disciplines, information systems, computer science, system analysis with an emphasis in information technology or equivalent experience

Qualifications:

Required Qualifications:
•Undergraduate degree in information management, computer science, engineering or a related field.
•Eight years of experience as an information technology professional in one or many roles such as architect, systems engineer, network engineer, or systems analyst.
•A well-rounded infrastructure background with exposure to multiple, diverse technologies and processing environments with good experience in Virtualization, Operating Systems, Storage and Networking.
•Knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, DNS, DHCP, VPN, Load Balancers, Firewalls etc.
•Demonstrated expertise in leading technical design projects during all phases of development and deployment.
•Demonstrated progressive experience successfully designing, delivering and/or supporting IT business solutions for large-scale organizations across multiple hardware and software platforms.
•Experience with monitoring, managing, analyzing, reporting and alarming on infrastructure components across the enterprise.
•Experience with specific management and monitoring tools and systems.

Preferred Qualifications
•Graduate degree in an Information Technology related field.
•Experience working in a higher education research University.
•2-4 years of Identity administration and governance experience.
•1 -3 years of designing and implementing identity solutions.
•Ability to effectively communicate technical issues.
•Ability to adjust to changes in priorities.
•Ability to work with minimal supervision with a high degree of accuracy.
•Ability to learn quickly and adapt to new circumstances.
•Good organizational skills.
•Must be flexible and willing to work extended hours as necessary.
•Excellent written, presentation, and oral communication skills.
•Ability to establish staff and departmental goals and objectives that are measurable.
•Ability to adjust to abrupt changes in priorities and strategy.
•Ability to interact comfortably with all levels of management.
•Excellent interpersonal and communication skills with the ability to build relationships, influence outcomes, and to deliver effective presentations to a variety of audiences.

Job Ad# (req2063)