IAM Engineer

University Overview

The University of Pennsylvania, the largest private employer in Philadelphia, is a world-renowned leader in education, research,and innovation. This historic, Ivy League school consistently ranks among the top 10 universities in the annual U.S. News & World Report survey. Penn has 12 highly-regarded schools that provide opportunities for undergraduate, graduate and continuing education,all influenced by Penn's distinctive interdisciplinary approach to scholarship and learning. As an employer Penn has been ranked nationally on many occasions with the most recent award from Forbeswho named Penn one of America's Best Large Employers in 2023.

Penn offers a unique working environment within the city of Philadelphia. The University is situated on a beautiful urban campus, with easy access to a range of educational, cultural, and recreational activities. With its historical significance and landmarks, lively cultural offerings, and wide variety of atmospheres, Philadelphia is the perfect place to call home forwork and play.

The University offers a competitive benefits package that includes excellent healthcare and tuition benefits for employees and their families, generous retirement benefits, a wide variety of professional development opportunities, supportive work and family benefits, a wealth of health and wellness programs and resources,and much more.

IAM Engineer

Systems Administrator C

The Identity and Access Management (IAM) Engineer provides technical and operational support for the University's Identity and Access Management (IAM) services. The role supports authentication, authorization, access provisioning, multifactor authentication, public key infrastructure, SSL/TLS certificate operations, and related security technologies. The position is primarily operational and consultative, emphasizing configuration, troubleshooting, service reliability, customer support, documentation, and automation rather than custom software development.

The successful candidate will be a self-starter who can work independently, learn new technologies quickly, and collaborate with support teams, application owners, vendors, and other ISC colleagues.

• Provide day-to-day operational support for IAM and access management services, including MFA, access provisioning, authentication and authorization support, and servicemonitoring.
• Troubleshoot access, login, certificate, provisioning, and related service issues; coordinate with the support desk, application owners, customers, vendors, and internal technical teams.
• Configure and maintain existing IAM services and related security controls, including role-based and attribute-based access concepts, SSL/TLS certificates, PKI-related services, and selected directory or identity repository functions.
• Support Linux-based IAM service hosts and cloud-hosted service components, including patching coordination, maintenance, monitoring, and operational readiness.
• Develop scripts, reports, documentation, and lightweight automation to improve repeatability, reduce operational toil, validate access controls, support metrics, and assist with service transition or retirement efforts.
• Provide secondary/backfill support for SSO and federation-related work using technologies such as SAML, OAuth, and OIDC, without serving as the primary SSO engineer.
• Participate in a shared on-call rotation for critical IAM services. Off-hours incidents are infrequent, but periodic scheduled maintenance may occur outside normal business hours.
• Other duties and responsibilities as assigned.

• Bachelor's degree and 2-3 years of related experience in identity and access management, information security, systems administration, application support, or a related technical operations role, or equivalent combination of education and experience is required.
• Experience should include operational support of production systems, troubleshooting complex technical issues, working with customers or support teams, and using scripting or automation to improve reliability and repeatability.
• Candidates should be comfortable working independently with limited supervision, communicating clearly with technical and non-technical stakeholders, and learning new IAM and security technologies as service needs evolve.

Philadelphia, Pennsylvania

Information Systems & Computing (ISC) is the University of Pennsylvania's central IT organization, providing the core network, data, voice, video, and enterprise application infrastructure and services upon which Penn's numerous Schools and Centers build their unique tools and capabilities.

ISC's 300-plus employees work closely with the University's IT organizations in order to create, deliver and support products and services that help Schools and Centers operate efficiently and effectively. We strive to be easy to work with, and to serve as a trusted advisor to Penn's IT community, faculty, staff…