IAM PAM & SSO Senior Analyst

Strengthen Identity Security at USCUSC is expanding its Cybersecurity IAM capabilities to help protect the university's people, systems and information in an increasingly complex threat environment. As the IAM PAM & SSO Senior Analyst, you will play a key technical role in designing, implementing and supporting enterprise identity solutions across Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA) and related Identity and Access Management (IAM) services.

This is an opportunity for an experienced IAM professional to work at the intersection of cybersecurity, identity engineering and enterprise technology within a major research university. You will partner with application, infrastructure and cybersecurity teams to deliver secure, scalable and reliable identity services while helping strengthen the technology foundation that supports USC's academic, research and operational mission.

The position reports to the PAM & SSO Services Manager and is based at USC's CAL location in a hybrid work environment.

Job Accountabilities Designs, implements, enhances, and maintains PAM, SSO, MFA, and related IAM solutions to support secure, reliable, and scalable identity services. Analyzes business and technical requirements to configure, integrate, and optimize IAM platforms that support authentication, authorization, and privileged access capabilities. Develops reusable technical standards, configurations, and implementation patterns that improve consistency, reliability, and operational supportability across IAM services.

Partners with application and infrastructure teams to integrate enterprise systems with PAM, SSO, MFA, and related IAM services. Supports onboarding of new applications and services while ensuring adherence to established security and technical requirements.

Troubleshoots and resolves complex issues involving identities, systems, access, accounts, authentication, authorization, entitlements, permissions, privileged access, and secrets management services. Analyzes system design weaknesses, integration challenges, and operational issues to determine appropriate solutions. Assesses impact, risk, and priorities to recommend and implement corrective actions, perform root cause analysis, and improve service reliability, security, and operational effectiveness.

Performs platform administration activities including upgrades, patching, monitoring, tuning, maintenance, and system health assessments. Identifies opportunities to improve automation, operational efficiency, service availability, and user experience.

Develops and maintains technical documentation, configuration standards, architecture artifacts, operational procedures, and support runbooks. Ensures documentation accurately reflects implemented solutions and supports consistent administration, troubleshooting, and ongoing maintenance of IAM services.

Provides technical guidance and knowledge transfer to team members, operational support personnel, and technology stakeholders. Shares subject matter expertise and promotes adoption of established IAM standards, procedures, and best practices to improve operational effectiveness and service support.

Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.

Researches emerging IAM technologies, vendor capabilities, and industry practices to identify service improvement opportunities. Recommends technical enhancements that strengthen the security, reliability, scalability, and supportability of identity services.

Minimum Qualifications Great candidates for the position of IAM PAM & SSO Senior Analyst will meet the following qualifications:

Bachelor's degree

Bachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)
Combined experience/education as substitute for minimum education4 years in Identity and Access Management.

Combined experience/education as substitute for minimum work experience

Hands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., Cyber Ark, Hashi Corp, Delinea/Thycotic, Microsoft Entra, Forge Rock, Shibboleth, Duo).Proficiency within a Unix command line.

Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).Excellent written and verbal communication…