Identity Management Developer (CEMI)

Cornell University•Ithaca, NY

4d•Remote

About The Position

The Identity Management Developer provides cybersecurity-focused technical leadership and engineering expertise for Cornell University’s Identity & Access Management services within the university IT Security Office. The role supports the secure, reliable, and effective delivery of enterprise authentication, authorization, and directory services used across academic, research, and administrative operations. The identity environment includes homegrown, open-source, and vendor-provided applications and services. The position contributes technical expertise to the design, planning, implementation, and ongoing improvement of identity services, with a focus on security, scalability, resiliency, and usability. The developer acts as a liaison among ITSO, campus business units, and external partners, helping stakeholders understand service capabilities, status, and access processes and translating technical concepts into clear guidance for non-technical audiences. The position also collaborates with vendors, peer institutions, and internal partners on emerging technologies and higher-education cybersecurity practices. The role works collaboratively within the Identity Management team and across ITSO to meet service levels, support operations, and respond to outages or system changes, including availability outside standard university business hours when required. This is a two-year term appointment that may be ended or extended based on organizational needs, funding availability, and performance. The role is eligible for remote work within the United States, with periodic travel to Cornell’s Ithaca, New York campus required. Cornell may modify, suspend, or terminate remote-work arrangements in accordance with policy and business needs. Visa sponsorship and relocation assistance are not available.

Requirements

Bachelor’s degree and at least 3–5 years of relevant experience, or an equivalent combination of education and experience.
Demonstrated success providing technical support and application or middleware development in a distributed, team-focused computing environment.
Expertise with one or more scripting or programming languages such as Java, Perl, Python, ReactJS, Ruby, or PHP.
Approximately one or more years of professional experience developing ReactJS applications and/or Ruby on Rails.
Linux system administration experience; Windows experience is preferred.
Working to advanced knowledge of one or more identity and access management technologies, including directory services, virtual directories, SAML2, OAuth2, LDAP, and Active Directory authorization technologies.
Experience writing technical design documentation, conducting code reviews, and using version control systems such as Git.
Ability to translate user and business needs into functional requirements and technical specifications and promote effective information sharing.
Ability to explain Identity Management systems, capabilities, and processes in clear, accessible business terms to non-technical stakeholders.
Ability to work effectively in a dynamic, deadline-driven, complex environment with competing priorities.
Strong facilitation, problem-solving, analytical, reasoning, and judgment skills, including the ability to evaluate options and recommend technical solutions.
Experience supporting and managing mission-critical production systems, including troubleshooting and incident response.
Ability to identify, scope, and implement automation or architectural improvements that enhance reliability, security, or efficiency.
Ability to cultivate and develop inclusive working relationships with students, faculty, staff, and community members.

Nice To Haves

Experience in higher education, research, or similarly complex enterprise environments, especially those with diverse identity populations and federated access needs.
Familiarity with cloud-based identity platforms and services such as Azure AD, AWS IAM, or Google Identity.
Experience with identity lifecycle management, provisioning and de-provisioning workflows, and access governance.
Knowledge of zero trust, least privilege, and modern identity security architectures.
Experience integrating identity services with enterprise applications, including SaaS platforms and custom applications.
Experience participating in cross-functional technical initiatives with security, infrastructure, and application teams.
Experience supporting incident response, audits, or compliance efforts related to identity and access management.
Familiarity with DevOps or CI/CD practices, automated deployments, and infrastructure-as-code concepts.
Strong customer-service orientation and ability to balance security requirements with usability and operational needs.

Responsibilities

Provide technical leadership and engineering expertise for Cornell’s Identity & Access Management services.
Support secure, reliable delivery of enterprise authentication, authorization, and directory services.
Contribute to the design, planning, implementation, and ongoing improvement of identity services.
Maintain a strong security posture while supporting scalability, resiliency, and usability.
Serve as a liaison between ITSO, campus business units, and external partners, explaining identity service capabilities, status, and access processes.
Translate complex technical concepts into clear, non-technical guidance for stakeholders.
Collaborate with vendors, peer institutions, and internal partners to evaluate emerging technologies and higher-education cybersecurity practices.
Work with the Identity Management team and across ITSO to meet service levels and operational objectives.
Respond to system outages and changes, including being available outside standard university business hours when required.
Foster an inclusive, cooperative, respectful, and welcoming work environment and support work/life integration.

Benefits

Comprehensive health care options
Generous retirement contributions
Access to wellness programs
Employee discounts with local and national retail brands
Health and personal leave
Three weeks of vacation
13 holidays, including an end-of-year winter break from December 25 through January 1
Two additional floating holidays
Tuition-free Extramural Study and Employee Degree Program
Tuition aid for external education
Cornell Children's Tuition Assistance Program