IAM PAM & SSO Senior Analyst

University of Southern California • Los Angeles, CA

5d • Hybrid

About The Position

USC is expanding its Cybersecurity IAM capabilities to help protect the university's people, systems and information in an increasingly complex threat environment. As the IAM PAM & SSO Senior Analyst, you will play a key technical role in designing, implementing and supporting enterprise identity solutions across Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA) and related Identity and Access Management (IAM) services. This is an opportunity for an experienced IAM professional to work at the intersection of cybersecurity, identity engineering and enterprise technology within a major research university. You will partner with application, infrastructure and cybersecurity teams to deliver secure, scalable and reliable identity services while helping strengthen the technology foundation that supports USC's academic, research and operational mission. The position reports to the PAM & SSO Services Manager and is based at USC's CAL location in a hybrid work environment.

Requirements

• Bachelor's degree in Instruction Systems Technology Or Computer Science Or in related field(s)
• 4 years in Identity and Access Management.
• Hands-on technical experience in implementing and troubleshooting of IAM solutions (e.g., CyberArk, HashiCorp, Delinea/Thycotic, Microsoft Entra, ForgeRock, Shibboleth, Duo).
• Proficiency within a Unix command line.
• Proficiency working with data, with query languages (e.g., SQL) and working with Directories (e.g., LDAP).
• Proficiency with IAM concepts (e.g., PBAC, RBAC, AuthN vs AuthZ).
• Excellent written and verbal communication skills; comfortable driving requirements gathering, architectural discussions and project reporting with non-technical business stakeholders.
• Maintain technical documentation including architecture diagrams, decision records, and runbooks.

Nice To Haves

• 6 or more years of experience in Identity and Access Management.
• Hands-on experience with Identity Governance and Administration (IGA) platforms such as SailPoint IIQ or ISC and Saviynt.
• Experience with enterprise directory solutions such as Microsoft Entra and Oracle Unified Directory, as well as identity verification technologies such as Persona or 1Kosmos.
• Experience with IAM within higher education or another complex, decentralized environment such as healthcare, technology, media and telecommunications, or financial services.
• Understanding of Zero Trust architecture, identity-based attack techniques and modern IAM controls.
• Experience leading enterprise identity transformations or directory modernization programs, including large-scale migration from legacy platforms.
• Demonstrated ability to establish and gain visibility into service accounts and secrets across hybrid cloud and on-premises environments.
• Experience working with professional services firms, such as Big Four firms, and/or IAM software vendors.
• CISSP certification or similar.

Responsibilities

• Designs, implements, enhances, and maintains PAM, SSO, MFA, and related IAM solutions to support secure, reliable, and scalable identity services.
• Analyzes business and technical requirements to configure, integrate, and optimize IAM platforms that support authentication, authorization, and privileged access capabilities.
• Develops reusable technical standards, configurations, and implementation patterns that improve consistency, reliability, and operational supportability across IAM services.
• Partners with application and infrastructure teams to integrate enterprise systems with PAM, SSO, MFA, and related IAM services.
• Supports onboarding of new applications and services while ensuring adherence to established security and technical requirements.
• Troubleshoots and resolves complex issues involving identities, systems, access, accounts, authentication, authorization, entitlements, permissions, privileged access, and secrets management services.
• Analyzes system design weaknesses, integration challenges, and operational issues to determine appropriate solutions.
• Assesses impact, risk, and priorities to recommend and implement corrective actions, perform root cause analysis, and improve service reliability, security, and operational effectiveness.
• Performs platform administration activities including upgrades, patching, monitoring, tuning, maintenance, and system health assessments.
• Identifies opportunities to improve automation, operational efficiency, service availability, and user experience.
• Develops and maintains technical documentation, configuration standards, architecture artifacts, operational procedures, and support runbooks.
• Ensures documentation accurately reflects implemented solutions and supports consistent administration, troubleshooting, and ongoing maintenance of IAM services.
• Provides technical guidance and knowledge transfer to team members, operational support personnel, and technology stakeholders.
• Shares subject matter expertise and promotes adoption of established IAM standards, procedures, and best practices to improve operational effectiveness and service support.
• Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.
• Researches emerging IAM technologies, vendor capabilities, and industry practices to identify service improvement opportunities.
• Recommends technical enhancements that strengthen the security, reliability, scalability, and supportability of identity services.

Benefits

• USC provides benefits-eligible employees with a broad range of benefits and perks to help protect their and their dependents’ health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior