IAM Architect

IAM Architect

The University of Pennsylvania, the largest private employer in Philadelphia, is a world‑renowned leader in education, research,and innovation. This historic, Ivy League school consistently ranks among the top 10 universities in the annual U.S. News & World Report survey. Penn has 12 highly-regarded schools that provide opportunities for undergraduate, graduate and continuing education,all influenced by Penn's distinctive interdisciplinary approach to scholarship and learning.

As an employer Penn has been ranked nationally on many occasions with the most recent award from Forbeswho named Penn one of America's Best Large Employers in 2023.

Penn offers a unique working environment within the city of Philadelphia. The University is situated on a beautiful urban campus, with easy access to a range of educational, cultural, and recreational activities. With its historical significance and landmarks, lively cultural offerings, and wide variety of atmospheres, Philadelphia is the perfect place to call home forwork and play.

The University offers a competitive benefits package that includes excellent healthcare and tuition benefits for employees and their families, generous retirement benefits, a wide variety of professional development opportunities, supportive work and family benefits, a wealth of health and wellness programs and resources,and much more.

IAM Architect

Information Technology Architect

Information Systems & Computing (ISC) is the University of Pennsylvania's central IT organization, providing the core network,data, voice, video, and enterprise application infrastructure and services upon which Penn's numerous Schools and Centers build their unique tools and capabilities.

ISC's 300-plus employees work closely with the University's ITorganizations in order to create, deliver and support products and services that help Schools and Centers operate efficiently and effectively. We strive to be easy to work with, and to serve as atrusted advisor to Penn's IT community, faculty, staff and students in support of an environment of discovery and progress.

ISC's focus on customer service and the high-quality,cost-effective, reliable implementation of modern IT solutionsadvances the mission of the University, as well as that of each individual School and Center. At Penn, technological freedom and departmental autonomy represent dearly held core values. ISCsupports those ideas by providing foundational services and cogentcounsel, empowering individuals and departments to employtheirdistinct strengths in support of their goals.

Learn more about us by visiting https://(Use the "Apply for this Job" box below).

The Identity and Access Management (IAM) Architect provides technical leadership for the design, evolution, integration, and support strategy of the University's Identity and Access Management(IAM) services. This position has a strong focus on multifactorauthentication, authentication architecture, authorizationservices, federation, public key infrastructure, SSL/TLS, and related security technologies. The architect collaborates with Information Security, IAM service teams, application owners,vendors, and other ISC stakeholders to develop secure, scalable,usable, and reliable IAM capabilities.

This role balances security,usability, privacy, availability, and operational requirements while providing technical direction, architectural documentation,service improvement recommendations, and guidance to technical staff.

• Provide technical direction and support for IAM services,including authentication, authorization, federation, MFA, PKI,SSL/TLS, and related security technologies.
• Provide senior technical support for multifactor authenticationservices, including policy design, enrollment and recoverypatterns, support strategy, assurance levels, usability, and security improvement initiatives.
• Design and review complex IAM solutions and integrationpatterns using standards such as SAML, OAuth, OIDC,certificate-based trust, RBAC, ABAC, and related access managementmodels.
• Partner with Information Security, IAM operations, application owners,…