Identity and Access Management Analyst - Information Technology Services

Established in 1844 and designated a University Center of the State University of New York in 1962, the University at Albany's broad mission of excellence in undergraduate and graduate education, research, and public service engages a diverse student body of approximately 17,000 students in nine schools and colleges across three campuses. Located in Albany, New York, the University is convenient to Boston, New York City, and the Adirondacks.

Information Technology Services (ITS) at the University at Albany seeks individuals with the skills and desire to work in a dynamic and complex, hybrid on-premises/cloud environment as an Identity and Access Management Analyst (IAM Analyst). This position will play a key part in the University's ongoing modernization of its Identity and Access Management platform and services, with opportunities to influence how they are designed, documented, and delivered to the campus community.

This position also has supervisory development opportunities, including supervision, training, and task coordination for student assistants.

The IAM Analyst collaborates with people and groups across the university, including other ITS service teams and key campus offices (Human Resources, Registrar, Financial Aid, etc.). This role handles a wide range of activities, ranging from support and troubleshooting IAM processes (provisioning, deprovisioning, authentication, etc.) to complex projects to implement new solutions and improve existing ones. The successful candidate is highly organized, attentive to detail, and adept at working both independently and as part of a team.

• Manage identity lifecycle and account administration processes including account provisioning and deprovisioning, faculty and staff terminations, department transfers, student academic life cycles, and exception processing.
• Support, configure, and enhance IAM applications that provide self-service and multi-factor authentication capabilities, including participation in continuous improvement and platform modernization efforts.
• Create and update documentation for the Identity and Access Management team and university constituents.
• Coordinate and perform authorization (access management) activities including assigning and maintaining access to resources, People Soft roles and security.
• Perform identity and access related security audits on directory services and security roles.
• Provide second level support to troubleshoot and resolve identity and access management questions and problems.
• Supervise and manage training for student assistants.

• Reports to Chief Information Security Officer.
• Supervises the following positions:
  No supervision of full-time employees.

• Excellent interpersonal, oral, and written communication skills.
• Customer service skills, including the ability to troubleshoot issues, communicate solutions effectively, and provide a positive support experience for a diverse campus community.
• Ability to organize work, prioritize tasks, and manage multiple and changing priorities.
• Applicants must demonstrate an ability to develop inclusive and equitable relationships within our diverse campus community.
• Applicants must demonstrate an ability to support diversity, equity, access, inclusion, and belonging relative to their role.

• A bachelor's degree from a college or university accredited by a U.S. Department of Education (DOE) or internationally recognized accrediting organization; or an associate's degree and a minimum of 3 years in information technology roles.
• 2 years of experience performing identity and access functions, such as account provisioning and de-provisioning.
• Demonstrated experience working with access security configuration for enterprise applications, including Student Information Systems (SIS) or other Enterprise Resource Planning (ERP) systems such as People Soft, Banner, or Workday.
• Demonstrated experience in creating both internal and public-facing documentation for IAM services and processes.

• Master's degree from a college or University accredited by the US Department of Education or internationally recognized accrediting organization.
• Experience in higher education.
• Experience with directory services, including account and group security and structure.
• Experience with administering multi-factor authentication services.
• Experience administering or supporting a cloud native IAM platform, including API driven integrations, policy based provisioning, and automated identity lifecycle workflows.
• Experience working in an environment that follows project management principles.
• Experience with IT Service Management practices.

• Provide scheduled support and consultation outside normal business hours, including occasional evenings, holidays, or weekends, within reasonable professional obligation and expectation.
• Report to campus in-person on Mondays, Wednesdays, Fridays, and as needed. This…