Identity and Access Management Engineer

Job no:

R-0000000874

Position Title:

Identity and Access Management Engineer

Faculty or Staff:

Staff

Full Time or Part Time:

Full time

In-Person, Hybrid, or Remote:

Hybrid

Minimum Starting Rate of Pay:

$96,971.00

Rate of pay commensurate with experience

Start Date:

07/01/2024

Job Description:

Mount Holyoke College’s Library, Information and Technology Services (LITS) Division empowers a diverse and inclusive learning community that equips every person to purposefully engage the world. We connect people with the information, expertise, spaces, and technologies that enhance their work and fuel scholarly endeavors. Mount Holyoke College is part of the Five Colleges, Inc. Consortium along with Amherst College, Hampshire College, Smith College, and the University of Massachusetts Amherst.

Reporting to the Head of Network, Systems, and Application Support, the Identity and Access Management (IAM) Engineer is the technical lead for the design, implementation, and management of the college’s IAM systems. They also work closely with IT colleagues and campus partners to develop policies and procedures around account lifecycles, role-based access control, and entitlements to a wide array of platforms and services.

This position is a member of the Technology Infrastructure and Systems Support group, which focuses on providing the technology foundation and its accompanying framework for the infrastructure, resources, and services that support the College. Operations within the TISS Group include data center operations, networking, enterprise services, business intelligence, academic technologies, and administrative computing.

Essential Job Functions:

Responsible for designing, implementing, and managing IAM-related technologies and platforms, including integrations with ERP platforms and other systems of record for people affiliated with the college. Responsible for the day-to-day management and optimization of workflows around account lifecycles, provisioning, and de-provisioning services, and Role Based Access (RBAC) across college platforms.

Works regularly with Identity Management tools such as Entra ID (Azure AD), Google Workspace, Active Directory, and others to monitor and report on account lifecycles, service entitlements, and access auditing.

Acts as the technical lead on implementing and managing single sign-on and multi-factor authentication solutions. Develops, normalizes, and refines identity attributes propagated outward from systems of record to downstream services.

Partners with colleagues in LITS and campus stakeholders in the development, documentation, and implementation of IAM-related policies, procedures, and configurations. Participates in data governance discipline to support data flow, normalization, and data definitions related to identity.

Ensures technology environment security and compliance through identifying and remediating vulnerabilities and risks, supporting security awareness to defend identities, participating in security audits and assessments, and contributes their expertise and support in security incident response.

Stays up to date with industry trends, regulations, and emerging technologies to ensure the IAM framework remains effective and compliant.

Additional Responsibilities:

Ensures compliance with professional and technology standards, license and regulatory requirements, accessibility standards and practices, and other College standards, policies, and procedures.

Contributes as a member of project teams, working groups, and other LITS and College committees to plan and achieve TISS, LITS, and College goals and priorities.

Actively works with colleagues in LITS, as well as College and external committees, to foster a robust campus community and create a welcoming and user-centered environment in which a diverse population of students, faculty, and staff can thrive.

Participates in external organizations, communities of practice, and other professional activities related to the duties of the position, including the College, Five Colleges, and larger higher ed communities, as well as those around programming and development tools, processes, and specific products.

Occasional evening and weekend work is necessary when dealing with system outages or system upgrades that cannot be done during normal work hours.

Attends and contributes to major campus-wide or LITS-sponsored events, which may be held at night, on weekends or holidays, and which are part of every employee’s core responsibilities.

Performs related duties as assigned.

Qualifications:

• Bachelor's degree in Computer Science or Information Systems, or equivalent education and experience
• 3 to 5 years of experience configuring and administering identity and access management system(s)
• Strong working knowledge of core IAM concepts, tools, protocols, and standards, such as Shibboleth, SAML, OAuth, OpenID Connect
• Familiarity with administering IAM products and tools such as AWS IAM, Entra ID (Azure AD), Okta, MidPoint, etc.
• Deep understanding of Active Directory concepts and integrations with Identity and Access Management systems
• Experience with Linux / Unix, Windows, and command-line scripting such as Bash, python, PHP, perl, PowerShell
• Experience integrating with and deployment of Multi-Factor Authentication (MFA) products such as Yubikey, Duo, Google OTP
• Ability to self-start and self-manage daily workload, as well as to collaborate with faculty and staff across the Mount Holyoke College campus as needed. Experience managing mid-size projects with cross-functional impact.
• Excellent communication skills. Ability to document technical infrastructure and to communicate clearly with both technical and non-technical stakeholders
• Demonstrated commitment to fostering diversity, equity, and inclusion in daily work and the workplace culture
• Demonstrated ability to work effectively with a diverse group of faculty, students, administrators, staff, and others
  
  
  

PHYSICAL REQUIREMENTS:

• Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
• Talking: Expressing or exchanging ideas by means of the spoken word. Those activities in which they must convey detailed or important spoken instructions to other workers accurately, loudly, or quickly.
• Sufficient clarity of speech required includes those which permit the employee to discern verbal instructions and communicate effectively in person and by telephone.
• The employee is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures, transcribing, viewing a computer terminal, and extensive reading.
  
  
  

WORKING CONDITIONS:

Work is primarily performed on-site in an interior office environment. Frequent travel on campus to departments/buildings or occasional travel to local off-campus locations. Remote work may be possible with supervisor approval and in alignment with the current MHC Flexible and Adaptive Work program.

Background Checks:

Mount Holyoke College is committed to providing a safe and secure environment, supported by qualified employees that will allow all of its students, faculty, staff and those associated with them to successfully carry out the mission of the college. As a condition of employment, the College will conduct appropriate background checks for all new hires. Mount Holyoke has designated the Office of Human Resources as the office responsible for ensuring that background checks (CORI, SORI, Credit History, & Driver Credential) are completed and utilized in the hiring process and Five College Office of Compliance and Risk Management as the office responsible for facilitating background checks as articulated in this policy.

Special Instructions for Applicants:

Apply online; application materials must include:

• A cover letter summarizing interests and qualifications
• A complete resume or curriculum vitae
• For faculty positions, statements on mentoring, teaching, and research will also be required.
  
  
  

Mount Holyoke College is an Equal Opportunity Employer (EOE)

Mount Holyoke College, the leading gender-diverse women’s college, is dedicated to providing equal employment opportunities for all individuals regardless of their race, color, religion, sex, national origin, age, disability, or any other legally protected status. We are a diverse community of staff, faculty, and students, united in our mission to offer an intellectually adventurous education in the liberal arts through academic programs that are renowned internationally for their cross-disciplinary excellence, experiential approach, and commitment to diversity.

Mount Holyoke College is a welcoming and inclusive environment that values and respects individuals of all backgrounds. As an EOE, we encourage members of historically underrepresented groups or nontraditional backgrounds to apply for open positions at our institution. The College has a long-standing tradition of providing women and other historically underrepresented groups with access to an innovative educational experience that prepares students for purposeful leadership by integrating hands-on opportunities into the curriculum. We firmly believe that diversity enriches our community and enhances our ability to prepare students for success in an increasingly globalized world.

We are dedicated to providing equal opportunities for all qualified applicants and to building an exemplary workforce that reflects the diversity of our student body and the communities we serve. Our ultimate goal is to produce graduates who are capable of engaging thoughtfully, effectively, and boldly with the world.