IAM Engineer

Penn Medicine, University of Pennsylvania Health System•Philadelphia, PA

1d•$71,733 - $90,000•Onsite

About The Position

The Identity and Access Management (IAM) Engineer provides technical and operational support for the University's Identity and Access Management (IAM) services. The role supports authentication, authorization, access provisioning, multifactor authentication, public key infrastructure, SSL/TLS certificate operations, and related security technologies. The position is primarily operational and consultative, emphasizing configuration, troubleshooting, service reliability, customer support, documentation, and automation rather than custom software development. The successful candidate will be a self-starter who can work independently, learn new technologies quickly, and collaborate with support teams, application owners, vendors, and other ISC colleagues.

Requirements

Bachelor's degree and 2-3 years of related experience in identity and access management, information security, systems administration, application support, or a related technical operations role, or equivalent combination of education and experience is required.
Experience should include operational support of production systems, troubleshooting complex technical issues, working with customers or support teams, and using scripting or automation to improve reliability and repeatability.
Candidates should be comfortable working independently with limited supervision, communicating clearly with technical and non-technical stakeholders, and learning new IAM and security technologies as service needs evolve.

Responsibilities

Provide day-to-day operational support for IAM and access management services, including MFA, access provisioning, authentication and authorization support, and service monitoring.
Troubleshoot access, login, certificate, provisioning, and related service issues; coordinate with the support desk, application owners, customers, vendors, and internal technical teams.
Configure and maintain existing IAM services and related security controls, including role-based and attribute-based access concepts, SSL/TLS certificates, PKI-related services, and selected directory or identity repository functions.
Support Linux-based IAM service hosts and cloud-hosted service components, including patching coordination, maintenance, monitoring, and operational readiness.
Develop scripts, reports, documentation, and lightweight automation to improve repeatability, reduce operational toil, validate access controls, support metrics, and assist with service transition or retirement efforts.
Provide secondary/backfill support for SSO and federation-related work using technologies such as SAML, OAuth, and OIDC, without serving as the primary SSO engineer.
Participate in a shared on-call rotation for critical IAM services. Off-hours incidents are infrequent, but periodic scheduled maintenance may occur outside normal business hours.
Other duties and responsibilities as assigned

Benefits

Excellent healthcare benefits
Tuition benefits for employees and their families
Generous retirement benefits
Wide variety of professional development opportunities
Supportive work and family benefits
Wealth of health and wellness programs and resources
Comprehensive medical, prescription, behavioral health, dental, vision, and life insurance benefits
Flexible spending accounts for eligible health care and dependent care expenses with pre-tax dollars
Tuition assistance for employees, spouses, and dependent children
Dependent children are also eligible for tuition assistance at other institutions
Generous retirement plans
Pre-tax or Roth basis retirement savings
Wide variety of investment options through TIAA and Vanguard
Substantial amount of time away from work
Long-Term Care Insurance
Wellness and Work-life Resources
Professional and Personal Development resources
Access to a wide range of University resources as well as cultural and recreational activities
Discounts on arts and entertainment, transportation, and mortgages
Free and discounted admission and memberships to Penn arts and cultural centers and museums
Savings on goods and services such as new cars, cellular phone service plans, movie tickets, and admission to theme parks
Flexible Work Hours
Penn Home Ownership Services (forgivable loan for eligible employees)
Adoption Assistance (reimbursement for qualified expenses)