Senior IAM Engineer - SSO, RBAC & Automation Lead

Northeastern University; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Northeastern University is seeking a Senior Identity & Access Manager (IAM) Engineer to design, implement, and govern the identity and access management framework across the organization. You will oversee SSO, user provisioning, privileged access, and RBAC using Entra ID, Active Directory, Grouper, Shibboleth, and Savyint.

In collaboration with IT and security teams, you will lead changes through formal change management, mentor IAM staff, and drive automation initiatives that improve security

Qualifications

• Bachelor's degree in computer science, Information Technology, or relevant experience.
• Minimum of 7 years of experience in Sr. IAM Engineering and implementation roles.
• Extensive platform knowledge and experience working with Entra ID, Microsoft Active Directory, Entra Connect, Grouper, Shibboleth and Savyint, or equivalent tools.
• Extensive Experience with security protocols and standards (e.g., SAML, OAuth, OpenID Connect).
• Knowledge and experience of working with Shibboleth, Incommon Federation, or SailPoint, LDAP are nice-to-haves.
• Advanced proficiency in scripting tools, such as bash, SQL, PowerShell, and Jenkins or GitHub Actions, for automation and management tasks. Experience with automation tools and frameworks relevant to IAM is a plus.
• Excellent technical and communication skills, with the ability to articulate complex IAM concepts to non-technical stakeholders. Strong analytical and problem-solving abilities. Proven track record of working in complex production environments.

Responsibilities

• Technology Implementation: Lead the deployment and integration of IAM technologies, leveraging Microsoft Active Directory (on-premises and Entra). Evaluate, select, and guide development of appropriate IAM tools and solutions to enhance security and user experience.
• Operational Improvements: Create and implement operational best practices to ensure ongoing availability of identity systems.
• Collaboration and Leadership: Work closely with IT, security, and business teams to understand access requirements and implement appropriate controls. Provide expert guidance and mentorship to IAM team members and other IT staff.
• Automation and Optimization: Oversee the development of automation scripts and workflows (e.g., using PowerShell) to streamline provisioning and de-provisioning processes. Optimize existing IAM processes for efficiency and effectiveness.
• Incident Management and Support: Act as the highest escalation point for complex access issues not resolved by the IT Service Desk. Oversee the resolution of IAM-related incidents and problems.

Skills

IAM engineering

Security protocols

Communication skills

Automation

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Entra ID

Active Directory

Grouper

Shibboleth

Savyint

Entra Connect

SailPoint

LDAP

PowerShell

Bash

SQL

Jenkins

GitHub Actions

Job description

Northeastern University is seeking a Senior Identity & Access Manager (IAM) Engineer to design, implement, and govern the identity and access management framework across the organization. You will oversee SSO, user provisioning, privileged access, and RBAC using Entra ID, Active Directory, Grouper, Shibboleth, and Savyint.

In collaboration with IT and security teams, you will lead changes through formal change management, mentor IAM staff, and drive automation initiatives that improve security