Lead IAM Architect & Security Engineer

The University of Massachusetts Amherst

Amherst (MA)

Hybrid

USD 120,000 - 170,000

Full time

2 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

The University of Massachusetts Amherst seeks a Lead Identity & Access Management Engineer to guide enterprise IAM initiatives, design and deploy authentication, authorization, and identity governance across on-premises and cloud systems.

You will lead a team of IAM professionals, drive strategic IAM roadmaps, ensure compliance with security standards, and collaborate with stakeholders to improve usability and security of identity services university-wide.

Qualifications

Bachelor's degree in computer science, information technology, cybersecurity, or related field with more than 9 years of progressive professional IT experience.
Associate's degree in computer science, information technology, cybersecurity, or related field with more than 11 years of progressive professional IT experience.
5 years of experience focused on identity and access management.
2 years of experience in a technical lead or team lead capacity, providing guidance, mentorship, or oversight to technical staff.
Demonstrated expertise in identity and access management systems (e.g., Active Directory, Azure AD/Entra ID, LDAP, identity governance platforms).
Strong knowledge of security protocols and authentication methods (e.g., SAML, OAuth 2.0, OpenID Connect, Kerberos, RADIUS).
Strong understanding of and experience with information security frameworks, privacy laws, and regulatory requirements (e.g., NIST, FERPA, HIPAA, PCI-DSS).
Demonstrated experience in architectural design and implementation of identity and access management best practices.
Proficiency in identity lifecycle management, including automated provisioning, de-provisioning, and access certification processes.
Experience with cloud-based identity management solutions and hybrid identity architectures.
Excellent written and verbal communication skills with the ability to communicate effectively with both non-technical end-users, executive stakeholders, and technical staff.
Demonstrated ability to lead technical teams, set priorities, and drive projects to completion.
Excellent organizational and time management skills with the ability to multi-task and adjust to rapidly changing priorities.
Strong problem-solving and analytical skills with the ability to conduct complex risk assessments.
Excellent customer service skills with the ability to provide efficient technical support to diverse audiences.
Ability to work in a fast-paced team environment and quickly adapt to new technologies.

Responsibilities

Lead IAM initiatives and inform strategic direction for authentication services, access controls, identity governance, and related middleware.
Collaborate on architectural design, development, and documentation of IAM systems for on-prem and cloud environments.
Configure and maintain the Identity Governance and Administration platform(s), including lifecycle design and provisioning workflows.
Design and implement enterprise IAM service architecture including SSO, MFA, identity federation, and provisioning workflows.
Analyze complex technical problems and develop innovative solutions.
Research and evaluate available IAM solutions and lead integrations.
Install, configure, and maintain IAM infrastructure components and integrations.
Collaborate with system owners and stakeholders to implement IAM standards and best practices.
Manage and optimize user provisioning/de-provisioning across the identity lifecycle.
Ensure periodic access reviews and access certifications are performed and remediated.
Apply IAM auditing and monitoring across systems.
Collaborate with IT security, administrators, stakeholders, and vendors to integrate IAM solutions.
Regularly review access policies based on organizational needs and compliance.