Engineer Identity Systems

Academy Sports + Outdoors; Katy (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Academy Sports + Outdoors in Texas seeks an experienced IAM Engineer to administer and secure identity and access management across enterprise applications.

You will design and implement SSO, MFA, and RBAC, and collaborate with Azure AD, SailPoint, CyberArk, and PingFederate to maintain high availability and strong security postures.

Ideal candidates have 3+ years of IAM experience, excellent problem-solving skills, and a proactive, collaborative mindset.

Qualifications

• Bachelor’s degree in IT or related field.
• MCSE / MCIPT / Azure and Google certs; VMware VCP6-DCV.
• 3+ years IAM administration experience.
• Experience with SailPoint, CyberArk, and SAML/SSO.
• Knowledge of Windows, Linux/Unix, and iSeries.
• RBAC, IAM policies, MFA and IDaaS experience.

Responsibilities

• Admin, configure, and maintain Enterprise IAM tools.
• Periodic recertification activities for identity and access management processes.
• Monitor customer experience, application performance and hosting infrastructure.
• Integrate IAM solutions such as Azure AD, SailPoint, CyberArk and PingFederate.
• Support development of roles, applications, workflows and configuration components.
• Root cause analysis and long term solutions to improve availability and performance.
• Cross-functional IT application support.
• Ensure solutions align with standards and procedures.
• Maintain test and pre-production environments.
• Participate in high severity incident recovery efforts.
• Manage IAM rule engine and automation for account lifecycle.
• Identify and mitigate risk per change control procedures.
• Understand Academy policies and safety rules.
• Duties may change; other duties as assigned.

Skills

IAM administration

SAML & SSO

RBAC & IAM policies

Azure AD

CyberArk

SailPoint

Windows/Linux

PowerShell

Education

Bachelor’s degree in IT

Certifications: MCSE / MCIPT / Azure / Google

VMware VCP6-DCV

Tools

CyberArk

SailPoint IdentityIQ

Oracle IdM

Savyint

PingFederate

ADFS

Job description

Who We Are

At Academy Sports + Outdoors our vision is to be the best sports + outdoors retailer in the country — but what truly sets us apart is our people. We’re a passionate, purpose-driven team that’s as committed to each other as we are to our customers.

We’ve spent over 80 years building a culture that puts people first. We believe in creating opportunities for growth, fostering meaningful connections, and supporting every Team Member’s journey. What fuels us? Our belief in the power of fun.

Here, you won’t just help customers gear up for their next adventure — you’ll launch one of your own. Whether you're starting out or leveling up, Academy is a place where fun can’t lose!

Education

• Bachelor’s degree in Information Technology or relevant field of required
• MCSE, MCIPT, Azure and/ or Google Certifications, VMWare VCP6-DCV

Work Experiences

• 3+ years of experience in-depth IAM administration which includes research, design, installation, testing, configuration, implementation, daily use, troubleshooting, and maintenance of IAM tools, which include, but are not limited to Sailpoint.
• Foundational knowledge of Windows, Linux/Unix, and iSeries (AS400) Operating systems
• Working knowledge of database, networking, virtualization, and server hardware concepts
• Experienced with CyberArk or similar Privileged Access Management platform
• Working knowledge of rogue accounts and role management processes
• Experience with application support and system trouble shooting preferred
• SAML and SSO integration expert, experience with open source and commercial SAML implementations (ADFS, Azure AD, Okta, SAML, Ping, OID, .etc.)
• Should be an expert in the areas of Identity and Access Management as well as Governance
• Experience with automating access control processes such as User Provisioning, Onboarding, Role-Based Access Control (RBAC), authorization models, Single Sign-On (SSO), LDAP, Active Directory
• Working experience on different types of Single-Sign-On (SSO), password reset, self-service, federated identity, multi-factor authentication (MFA), and IAM products and services, including Identity as a Service (IDaaS)
• Experience migrating disparate legacy IAM technologies and processes to modern architectures is preferred
• Experience with offshore teams preferred

Skills

• Strong interpersonal, written, and verbal communication skills to interface effectively with individuals at various levels
• Thorough working knowledge of Windows Server 2003/2008/2012/ 2016, Unix
• Thorough working knowledge of Active Directory
• Subject matter expert level experience in one or more of the following: Web Access Management (WAM), Single Sign On (SSO) Federation (SAML and OIDC), Multi-Factor Authentication (MFA), LDAP Directories, Active Directory
• Experience in CyberArk setup and administration
• Experience in managing deployments of an IAM platform (i.e.: Oracle IdM, SailPoint IdentityIQ or Savyint)
• Experience with role mining, role-based access control and access certification with Oracle IdM, SailPoint IdentityIQ or Savyint
• Experience with scripting skills (Java, BeanShell/JavaScript, JSP/Servlets, SQLand/or PowerShell preferred)
• Profound understanding of web-based technologies including multi-tier applications and security standards (HTTP, TLS, REST/SOAP, Cookie Handling, SAML, OAUTH, OIDC, WS-Trust,…)
• Thorough working knowledge of and ability to, configure and resolved issues related to Microsoft Office 365.
• Ability to remain organized, pay attention to detail, and meet critical deadlines
• Analytical with strong problem-solving abilities and creative resolution skills
• Ability to work well under pressure while consistently meeting time sensitive deadlines

Responsibilities

• Responsible for administration, configuration, and maintenance of Enterprise IAM tools
• Conduct periodic recertification activities for identity and access management processes
• Proactively monitor the customer experience, application performance and hosting infrastructure
• Actively participate in customizing, and integrating IAM solutions such as Azure Active Directory, SailPoint, CyberArk and PingFederate
• Partner with Department Leaders to support development of roles, applications, workflows and other configuration components
• Participate in root cause analysis and long term solutions to improve availability and performance of the application portfolio
• Participate in projects and provides cross-functional IT application support
• Ensure developed solutions are aligned with Enterprise Operations standards and procedures
• Maintain and administer test and pre-production environments
• Participate in high severity incident recovery efforts
• Manage IAM rule engine, leveraging automation and attributes for account lifecycle and role automation
• Identify and mitigate risk while adhering to corporate and department change control procedures
• Develop a thorough understanding of Academy’s policies, procedures and safety rules
• Duties may change; team members may be required to perform other duties as assigned

Physical Requirements & Attendance

• Acceptable level of hearing and vision to perform job duties
• Adhere to company work hours, policies, procedures, and rules governing professional staff behavior
• Regular attendance required

Equal Employment Opportunity

Academy is an Equal Opportunity Employer and does not discriminate with regard to employment opportunities or practices on the basis of race, religion, national origin, sex, age, disability, gender identity, sexual orientation, or any other category protected by law.