IAM Architect — Flexible Hours & Identity Security Lead

Penn Medicine, University of Pennsylvania Health System; Philadelphia (Philadelphia County); On-site; USD 102,000 - 135,000; Full time

Benefits offered by this job

Health benefits

Tuition benefits

Retirement plans

Flexible work hours

Wellness programs

Job summary

University of Pennsylvania’s Information Systems & Computing (ISC) seeks an IAM Architect to provide technical leadership for identity and access management services, focusing on authentication architecture, MFA, and secure, scalable IAM capabilities. You will collaborate with information security, service teams, and stakeholders to balance security, usability, and availability across Penn’s IT ecosystem.

As a central IT organization, ISC supports the core infrastructure and enterprise

Qualifications

• Bachelor’s degree and 4 to 6 years of experience or equivalent combination of education and experience is required.
• Experience in identity and access management, information security, systems architecture, and related technical field.
• Architectural design or senior technical leadership for IAM or security services; knowledge of MFA, authentication/authorization models, federation standards, PKI, SSL/TLS; ability to communicate complex decisions.
• Ability to operate independently, manage ambiguity, guide others through complex technical problems, balance security and usability.

Responsibilities

• Provide technical direction and support for IAM services, including authentication, authorization, federation, MFA, PKI, SSL/TLS, and related security technologies.
• Provide senior technical support for multifactor authentication services, including policy design, enrollment and recovery patterns, support strategy, assurance levels, usability, and security improvement initiatives.
• Design and review complex IAM solutions and integration patterns using standards such as SAML, OAuth, OIDC, certificate-based trust, RBAC, ABAC.
• Partner with Information Security, IAM operations, application owners, vendors, and campus stakeholders to assess requirements, evaluate risk, and recommend secure IAM approaches.
• Establishes and follows architectural standards, design patterns, documentation, and operational best practices to improve IAM reliability.
• Evaluate emerging IAM and authentication technologies, including passwordless, WebAuthn/FIDO2, CIAM, adaptive or risk-based authentication.
• Provide escalation support, mentoring, and technical guidance to engineers; participate in planning for incidents and maintenance.
• Other duties as assigned.

Skills

IAM architecture

MFA

Federation

SAML

OAuth

OIDC

PKI

SSL/TLS

communication

Education

Bachelor’s degree

Tools

SAML

OAuth

OIDC

Job description

University of Pennsylvania’s Information Systems & Computing (ISC) seeks an IAM Architect to provide technical leadership for identity and access management services, focusing on authentication architecture, MFA, and secure, scalable IAM capabilities. You will collaborate with information security, service teams, and stakeholders to balance security, usability, and availability across Penn’s IT ecosystem.

As a central IT organization, ISC supports the core infrastructure and enterprise