IAM Architect - Flexible Hours & Security Leadership

Penn Information Systems & Computing; Philadelphia (Philadelphia County); On-site; USD 101,750 - 135,000; Full time

Job summary

University of Pennsylvania's Information Systems & Computing (ISC) seeks an IAM Architect to lead security-focused identity and access initiatives. You will design and review complex IAM solutions and guide engineers and stakeholders through critical decisions.

The role requires strong leadership, expertise in authentication/authorization models, federation standards (SAML, OAuth, OIDC), PKI/TLS, and the ability to translate technical concepts for non-technical partners.

Qualifications

• Bachelor's degree and 4 to 6 years of experience in IAM or security.
• Strong knowledge of MFA, authentication/authorization models.
• Experience with architecting IAM or security services and communicating decisions to stakeholders.
• Ability to operate independently and guide others through complex technical problems.

Responsibilities

• Provide technical direction and support for IAM services, including authentication, authorization, federation, MFA, PKI, SSL/TLS, and related security technologies.
• Provide senior technical support for multifactor authentication services, including policy design, enrollment and recovery patterns, support strategy, assurance levels, usability, and security improvement initiatives.
• Design and review complex IAM solutions and integration patterns using standards such as SAML, OAuth, OIDC, certificate-based trust, RBAC, ABAC, and related access management models.
• Partner with Information Security, IAM operations, application owners, vendors, and campus stakeholders to assess requirements, evaluate risk, and recommend secure and supportable IAM approaches.
• Establishes and follows architectural standards, design patterns, documentation, and operational best practices to improve IAM reliability, repeatability, transparency, and security.
• Evaluate emerging IAM and authentication technologies, including passwordless authentication, WebAuthn/FIDO2, CIAM patterns, adaptive or risk-based authentication, and MFA service enhancements.
• Provide escalation support, mentoring, and technical guidance to engineers and support teams; participate in planning for incidents, service changes, and scheduled maintenance as needed.
• Other duties and responsibilities as assigned.

Skills

IAM architecture

MFA & authentication

Federation standards

PKI & TLS

Stakeholder communication

Education

Bachelor's degree in a related field

Tools

SAML

OAuth

OIDC

PKI

SSL/TLS

Job description

University of Pennsylvania's Information Systems & Computing (ISC) seeks an IAM Architect to lead security-focused identity and access initiatives. You will design and review complex IAM solutions and guide engineers and stakeholders through critical decisions.

The role requires strong leadership, expertise in authentication/authorization models, federation standards (SAML, OAuth, OIDC), PKI/TLS, and the ability to translate technical concepts for non-technical partners.