IAM Engineer

Colorado School of Mines•Colorado, CO

1d•$101,050 - $112,285•Hybrid

About The Position

The IAM Engineer is part of the Application Services team within Colorado School of Mines’ Information Technology department. The role designs, implements, administers, and improves enterprise identity and access management services and integrations that protect institutional systems, data, and applications. It supports authentication and directory services, application integrations, single sign-on (SSO), multifactor authentication (MFA), identity workflows, and access governance. The engineer works with vendors, campus stakeholders, and IT teams to troubleshoot access issues, improve reliability and user experience, automate processes, maintain documentation, and provide training and knowledge transfer. The position will contribute to the implementation of Okta Identity Governance (OIG) and help shape the university’s approach to access governance and identity lifecycle management. It also develops IAM solutions, workflows, automation, role-based access models, lifecycle standards, and governance practices, and evaluates existing services for modernization and sustainability. The role communicates service impacts, engages with campus partners and professional communities, and participates in working groups and institutional initiatives. The position currently follows a hybrid work model with regular campus presence required. The successful candidate must be able to commute to campus in Golden, Colorado. The position is not eligible for visa sponsorship now or in the future. Salary is $101,050–$112,285 annually.

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, or a closely related field, or equivalent directly related experience on a year-for-year basis.
At least 5 years of full-time professional IT experience in IAM, cybersecurity, systems administration, enterprise application integration, directory services, authentication services, or a closely related area.
At least 4 years of hands-on experience administering, configuring, implementing, supporting, or troubleshooting enterprise IAM platforms or identity services.
Experience with at least 3 of the following: SSO integrations; MFA; directory services or directory integrations; application onboarding; identity lifecycle processes, including provisioning or deprovisioning; or identity protocols such as SAML, OAuth, OpenID Connect, or LDAP.
Demonstrated experience applying information security or access control principles in enterprise systems or identity services.
Demonstrated experience creating or maintaining technical documentation, support procedures, configuration information, or operational guidance.
Demonstrated experience supporting reliable enterprise IT services through troubleshooting, issue resolution, or service improvement.

Nice To Haves

Master’s degree in computer science, information technology, cybersecurity, or a closely related field.
Direct hands-on experience with Okta administration, configuration, and application integration.
Experience designing and supporting IAM workflows, automation, and identity lifecycle processes in a complex enterprise environment.
Experience leading or supporting implementation of a new IAM platform, major IAM enhancement, or modernization initiative.
Experience with access governance, role design, provisioning and deprovisioning, application onboarding, and automated access controls in a complex enterprise environment.
Experience using scripting, APIs, automation tools, or workflow tools for integrations, identity processes, operational efficiency, or technical troubleshooting.
Experience communicating technical information to technical teams, support staff, vendors, system administrators, business users, or institutional stakeholders.
Ability to communicate technical concepts clearly and effectively with technical teams, support staff, vendors, and business stakeholders.
Ability to evaluate solution options and recommend sustainable improvements to IAM services, integrations, or related enterprise systems.
Ability to balance security, usability, and operational efficiency when designing and supporting IAM services.
Experience supporting hybrid and cloud-based environments and familiarity with higher education or similarly complex enterprise settings.
Relevant industry certifications such as CISSP, CISM, or IAM-related certifications.

Responsibilities

Design, implement, administer, and continuously improve enterprise IAM services and integrations that protect institutional systems, data, and applications.
Configure and maintain IAM platforms, authentication services, directory services, and related integrations, including documentation, configuration standards, and operational procedures.
Lead and support SSO and MFA integrations for Mines applications through Okta, working with vendors and campus stakeholders.
Troubleshoot and resolve IAM-related issues, implement enhancements, and optimize services for reliability, performance, and user experience while minimizing technical debt.
Create and maintain technical documentation, knowledge base content, and operational guidance; provide knowledge transfer and training to support staff, system administrators, and IT partners.
Collaborate with IT teams and institutional stakeholders to align identity services with security, infrastructure, application, compliance, and business requirements.
Plan, design, and enhance IAM solutions, workflows, and automation for scalable, consistent, and secure service delivery.
Develop and refine role-based access models, identity lifecycle standards, and access governance practices.
Evaluate current services and authentication patterns to identify modernization opportunities and improve usability and sustainability.
Provide guidance and training to support staff and partners on IAM services, support processes, and common user issues.
Communicate planned maintenance, service disruptions, and other service impacts to stakeholders and support teams.
Engage with campus partners and the professional community to understand identity-related needs, share knowledge, and support service improvement.
Participate in working groups, communities of practice, and institutional initiatives related to IAM and supporting technologies.

Benefits

Flexible health and dental care options.
Generous sick and vacation time.
13 paid holidays per year, including a week-long winter break for the entire campus.
Fully vested retirement plan from the first day of employment, with an employer contribution.
Tuition benefits: 6 credits per year for employees and a 50 percent discount for dependents.
Free RTD Ecopass.
Access to discount programs through the State of Colorado.
Free tickets for Mines Athletics home games.
Access to the Recreation Center, including fitness classes, training, and a swimming pool.
Equipment rentals through the Outdoor Recreation Center.
On-campus daycare center.