Senior Identity & Access Management Engineer; IT Security Specialist - Provisional

Senior Identity & Access Management Engineer (IT Security Specialist
3) - Provisional

This position encompasses professional and responsible technical consultative and/or administrative work. Under administrative direction of a university IT manager, with broad latitude of independent action or decision, serves as subject matter expert on IT security, identity, and access infrastructure; provides IT security architectural guidance; designs security solutions; conducts IT risk assessments and recommended mitigating solutions.

IT Security Specialist

Non-exempt

The Office of Computing and Information Services (CIS) at the City University of New York (CUNY) supports the IT and telecommunications needs of CUNY's 26 colleges. CIS supports enterprise IT and applications, identifies and develops new technologies that advance the University's core mission, operates and maintains the University's network, the enterprise Data Center, and the CUNY Service Desk. Additionally, CIS manages the processes that safeguard the University’s IT assets and maintains the security posture by operating the CUNY Security Operations Center (SOC), develops disaster recovery plans for business continuity, and supports the CUNYfirst Enterprise Resource Planning (ERP) solution that integrates student administration, financial management, and human resources operations across CUNY’s 26 colleges.

Lastly, CIS provides strategic and operational IT leadership to all CUNY campuses.

Reporting to the Manager of Oracle Access Management (OAM), the Senior Identity Access Management (IAM) Engineer serves as the senior technical resource responsible for the design, implementation, administration, and security of enterprise Identity & Access Management (IAM) services supporting the University's authentication and authorization infrastructure. This position provides advanced support for Single Sign-On (SSO), Multi-Factor Authentication (MFA), federated identity services, directory services, RADIUS authentication, and identity lifecycle management.

The Senior IAM Engineer develops automation solutions, operational reporting, and security controls to protect University systems while ensuring reliable and secure access to institutional resources.

In addition to the General Duties, other key duties include, but are limited to the following:

• Administers and supports enterprise IAM platforms, authentication services, and access management solutions.
• Designs, implements, and maintains Single Sign-On integrations utilizing SAML, OAuth, OpenID Connect, and related federation technologies.
• Supports Multi-Factor Authentication (MFA), RADIUS, Eduroam, and related authentication infrastructure.
• Develops Python automation and SQL-based reporting to improve operational efficiency, auditing, and security monitoring.
• Manages LDAP directory services, identity synchronization, provisioning, and identity lifecycle processes.
• Performs advanced troubleshooting of authentication, authorization, directory, network, and application integration issues.
• Conducts security reviews of authentication configurations and access controls to ensure compliance with university security standards.
• Participates in incident response, root cause analysis, and remediation activities involving identity and access management services.
• Collaborates with Information Security, Infrastructure Services, Networking, Application Support, and campus stakeholders to implement secure authentication solutions.
• Develops and maintains technical documentation, operational procedures, and security standards related to IAM services.
• Provides technical leadership and guidance for IAM-related projects and initiatives.

• 1. A baccalaureate degree in…