Senior Identity

The Chronicle Of Higher Education, Inc.; Boston (MA); On-site; USD 113,865 - 165,105; Full time

Job summary

The Chronicle Of Higher Education, Inc. is seeking a Senior Identity & Access Management Engineer to oversee IAM system design and management at Northeastern University. The role requires extensive experience in IAM technologies and security protocols to protect sensitive information.

The ideal candidate will lead implementation initiatives, collaborate with cross-functional teams, and ensure compliance with regulations. The expected hiring range for this position is $113,865.00 – $165,105.00.

Qualifications

• Minimum of 7 years of experience in senior IAM engineering and implementation roles.
• Extensive experience with security protocols and standards such as SAML, OAuth, OpenID Connect.
• Excellent technical and communication skills for articulating IAM concepts.

Responsibilities

• Lead the deployment and integration of IAM technologies.
• Create and implement operational best practices for identity systems.
• Provide expert guidance and mentorship to IAM team members.

Skills

IAM technologies

Microsoft Active Directory

Entra

Savyint

Shibboleth

Bash scripting

SQL

PowerShell

Problem-solving

Education

Bachelor’s degree in computer science or information technology

Tools

Entra ID

Grouper

Jenkins

GitHub Actions

Job description

Senior Identity & Access Management Engineer

About the Opportunity

The Senior Identity & Access Manager (IAM) Engineer is responsible for designing, implementing, and managing the identity and access management framework within Northeastern University. Utilizing a deep understanding of IAM technologies, security protocols, and best practices, the engineer ensures the protection of sensitive information and compliance with regulatory requirements. Leveraging identity systems—including Microsoft Active Directory, Entra, Savyint, Grouper, and Shibboleth—the engineer provides senior operational support to these systems in support of Single Sign-On (SSO), User Provisioning, Privileged Access Management, and Role-Based Access Control (RBAC). The engineer makes recommendations for, and leads, the implementation of changes through a formal change management process, working cross‑functionally to align IAM initiatives with business objectives.

The engineer plays a critical role in shaping the security posture of the organization, working with cutting‑edge technologies and leading initiatives that significantly impact user experience, operations, and security.

Eligibility

Applicants must be authorized to work in the United States. The University is unable to sponsor for this role, now or in the future.

Minimum Qualifications

• Bachelor’s degree in computer science, information technology, or relevant experience.
• Minimum of 7 years of experience in senior IAM engineering and implementation roles.
• Extensive platform knowledge and experience working with Entra ID, Microsoft Active Directory, Entra Connect, Grouper, Shibboleth, Savyint, or equivalent tools.
• Extensive experience with security protocols and standards (e.g., SAML, OAuth, OpenID Connect).
• Knowledge of and experience with Shibboleth, InCommon Federation, SailPoint, or LDAP are nice‑to‑have.
• Advanced proficiency in scripting tools such as Bash, SQL, PowerShell, and Jenkins or GitHub Actions for automation and management tasks. Experience with automation tools and frameworks relevant to IAM is a plus.
• Excellent technical and communication skills, with the ability to articulate complex IAM concepts to non‑technical stakeholders. Strong analytical and problem‑solving abilities. Proven track record of working in complex production environments.

Key Responsibilities & Accountability

• Technology Implementation: Lead the deployment and integration of IAM technologies, leveraging Microsoft Active Directory (on‑premises and Entra). Evaluate, select, and guide the development of appropriate IAM tools and solutions to enhance security and user experience.
• Operational Improvements: Create and implement operational best practices to ensure ongoing availability of identity systems.
• Collaboration and Leadership: Work closely with IT, security, and business teams to understand access requirements and implement appropriate controls. Provide expert guidance and mentorship to IAM team members and other IT staff.
• Automation and Optimization: Oversee the development of automation scripts and workflows (e.g., using PowerShell) to streamline provisioning and de‑provisioning processes. Optimize existing IAM processes for efficiency and effectiveness.
• Incident Management and Support: Act as the highest escalation point for complex access issues not resolved by the IT Service Desk. Oversee the resolution of IAM‑related incidents and problems.

Position Type

Information Technology

Benefits

Compensation Grade/Pay Type: 113S

Expected Hiring Range: $113,865.00 – $165,105.00

Equal Employment Opportunity Statement

All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.