Federated Security Engineer - OIT

Emory University•Atlanta, GA

8d•Remote

About The Position

The Federated Security Engineer is a detail-oriented, proactive technical professional with expertise in Identity and Access Management (IAM) and foundational cybersecurity experience related to applications and secure access. The role manages and optimizes Emory University's central secure application access ecosystem, including application onboarding, updating, and offboarding; maintenance of the Configuration Management Database (CMDB) and application catalog; and integration of applications with the Single Sign-On (SSO) solutions Entra ID and Shibboleth IDP. The engineer collaborates with Cybersecurity and IAM teams, application owners, and technical teams to design and support secure application integrations, maintain configurations that meet cybersecurity and compliance requirements, and improve IAM processes and workflows. The role also supports audits, documentation, ServiceNow request and change processes, application inventory and intake solutions, and troubleshooting across multiple identity providers. On-call IDP support is provided as needed. Tasks may be performed remotely, with only occasional visits to an Emory University location. Eastern time zone business hours may apply. Emory does not approve New Jersey, Alaska, Hawaii, U.S. territories, or locations outside the United States as primary work locations, and reserves the right to change the work-location status with notice to the employee.

Requirements

Bachelor's degree in a scientific or math field and three years of related experience, or an equivalent combination of education, training, and experience.
Hands-on programming experience and/or non-trivial scripting experience in a robust programming language.
Ability to write clean, maintainable code to solve practical problems.

Nice To Haves

Hands-on experience with ServiceNow, particularly CMDB and catalog management.
Understanding of SSO technologies such as SAML, OIDC, OAuth2, CAS, and SCIM, and of application integration principles.
Familiarity with provisioning and deprovisioning workflows in IAM platforms such as Okta, Entra ID, Ping Identity, NetIQ, or Saviynt.
Experience with ITIL processes and change management in ServiceNow.
Experience with application security best practices and compliance frameworks such as NIST and ISO 27001.
RDBMS experience, including proficiency in SQL and/or PL/SQL.
Experience with low-code development platforms such as Power Platform.
Knowledge of data governance and asset management practices.
Familiarity with Role-Based Access Control (RBAC) models.
Understanding of authentication concepts, including Multi-Factor Authentication (MFA), SSO, and Kerberos.

Responsibilities

Collaborate with Cybersecurity and IAM teams to securely onboard and offboard applications in the SSO environment.
Design or consult on application integration approaches that enable secure access and SSO.
Validate and maintain application integration configurations to meet cybersecurity and compliance requirements.
Help ensure implementations and changes align with access control policies and security standards.
Support IAM and application integration audits and compliance reviews by facilitating responses through appropriate subject-matter experts.
Maintain configuration items related to federated applications in the CMDB, ensuring application records are accurate, complete, and current.
Manage the application catalog and track integrated applications with metadata such as owners, contacts, technical details, and integration type.
Use ServiceNow to manage requests, incidents, and changes related to application integrations and IAM processes.
Coordinate application onboarding and offboarding, including requirements gathering, integration configuration, testing, and documentation.
Work with application owners to support smooth onboarding and offboarding transitions.
Maintain end-to-end lifecycle documentation for each application in scope.
Create and maintain detailed documentation for application integrations, onboarding and offboarding procedures, and CMDB updates.
Gather and analyze stakeholder enhancement requests, prioritize them, and coordinate implementation with technical teams.
Identify opportunities to streamline IAM-related processes and improve integration workflows.
Help engineer modern applications that support the SSO integration intake process and application inventory.
Troubleshoot, develop, and support multiple identity providers, including Entra ID and Shibboleth IDP.
Participate in the on-call rotation for IDP support as needed.
Perform other related duties as required.