Identity Management Engineer

$140,000 - $160,000/Yr

Stony Brook University - Stony Brook, NY

Full-time - Mid Level

Remote - Stony Brook, NY

Educational Services

About the position

The Identity Management Engineer is responsible for implementing, maintaining, and troubleshooting the university's identity management platform and associated technologies. This role involves developing technologies and processes for secure enterprise-wide identity management functions, ensuring data security, and collaborating with various stakeholders to align identity management solutions with business objectives.

Responsibilities

• Implement and develop technologies and processes for stable and secure enterprise-wide identity management functions.
• Provision new user accounts, establish unique credentials, and de-provision accounts.
• Integrate directories and databases for authentication and authorization services.
• Collaborate with vendors and consultants to install, configure, integrate, and test new systems.
• Design and maintain custom applications used for identity management functions.
• Monitor system performance, apply patches, and update system configurations.
• Integrate identity management solutions with existing systems and applications.
• Oversee data integrity and ensure authoritative sources are integrated.
• Implement technology and processes for managing the lifecycle of digital identities.
• Work closely with service owners to ensure seamless integration with Single Sign-On (SSO) and modern protocols.
• Implement and enforce robust security measures to protect sensitive identity-related data.
• Establish monitoring and auditing mechanisms to detect security incidents and track user activity.
• Collaborate with cross-functional teams to gather requirements and assess technical feasibility.
• Assist end-users and IT support staff with access-related issues.
• Fully document implementation and configuration details.

Requirements

• Bachelor's Degree or a combination of directly related full-time experience totaling nine years.
• Five years of full-time experience supporting Identity and Access Management services.
• Experience developing programming code.
• Experience in identity management platforms and best practices.
• Experience with key identity management and access concepts such as least privilege and role-based access control (RBAC).
• Experience with IAM technologies such as single sign-on (SSO), directory federation, and multi-factor authentication.

Nice-to-haves

• Advanced Degree.
• Active cyber security or relevant certification (CISSP, CISM, IDM-specific).
• Programming/scripting experience in PL/SQL, Powershell, Linux shell, Java, and/or Perl.
• Experience with additional cyber security functions other than identity management.
• Experience working with identity management in a large complex environment.
• Experience developing technical and administrative documentation and diagrams.
• Familiarity with regulations and frameworks such as HIPAA, FERPA, NIST, GDPR.

Benefits

• Hybrid telecommuting pilot program allowing up to 5 remote days per pay period.
• Comprehensive health insurance options.
• Retirement savings plan with employer contributions.
• Professional development opportunities.
• Paid holidays and vacation time.