Identity Systems Engineer III

University of Central Florida • Orlando, FL

4d • $75,809 - $94,761 • Onsite

About The Position

The Identity Systems Engineer III plays a critical role in advancing UCF's identity and access management and cybersecurity capabilities. This position leads the engineering and continuous improvement of AI-enabled identity lifecycle management services, leveraging automation and intelligent technologies to strengthen access governance, improve operational efficiency, and reduce institutional risk. The role designs, implements, and supports UCF's hybrid identity ecosystem, including cloud and on-premises directories, authentication, authorization, single sign-on, multi-factor authentication, and related identity technologies that provide access to university resources. Working across a diverse portfolio of enterprise applications, platforms, and teams, the position engineers security controls and integrations that protect sensitive data, support regulatory compliance, and enable the adoption of emerging technologies. Through innovation, collaboration, and technical expertise, this position contributes directly to the resilience, security, and modernization of the university's digital environment.

Requirements

• Bachelor’s degree and 4 years of relevant experience; or High School Diploma (or equivalent) and 8 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
• Position requires a valid Class E driver’s license.
• This position may involve driving to various locations on and off campus to conduct University business.
• All applicants must be authorized to work for any U.S. employer.
• Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

Nice To Haves

• Experience engineering administering and supporting cloud-based Identity and Access Management (IAM) platforms, including Microsoft Entra ID (Azure AD), Amazon Web Services (AWS), Google Cloud Platform (GCP), or similar enterprise identity solutions.
• Experience implementing, securing, and supporting identity federation and provisioning technologies such as SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Active Directory integrations.
• Experience monitoring, responding, and automating the response to identity-related security events using detection and response or security operations tools.
• Experience developing automation solutions and management such as the life cycle workflows of AI agents, scripts, or workflows.
• Experience supporting access governance, regulatory compliance, and identity lifecycle management in a large organization, preferably within higher education or a public-sector institution.

Responsibilities

• Support designing, configuring and administrating cloud-based identity systems and integrations including those from Microsoft Entra ID, Amazon Web Services, and Google Cloud Platform. Implement and maintain appropriate access policies, modern authentication methods, risk reducing identity protection controls and associated cloud identity services. Implement security best practices to support the institution’s overall security posture and reliable operation of enterprise authentication and authorization services.
• Support the integration of institutional applications and systems with IAM platforms using SAML, OAuth, OIDC, SCIM, and related technologies. Work with campus partners and vendors to ensure secure, standards based interoperability and timely resolution of access related requests.
• Maintain IAM related on-premise infrastructure, including on premises and cloud data center servers, ensuring systems are patched, updated, and aligned with institutional security standards. Support directory synchronization services, connectors, agents, and other IAM platform components to ensure operational stability.
• Create and maintain technical documentation, standard operating procedures, and knowledge resources. Provide tier three technical guidance and support to campus stakeholders, collaborates with IT and information security teams, and contributes to planning and continuous improvement of IAM services. Other duties as assigned.
• Develop and maintain automation scripts, workflows, and tools including AI to improve the efficiency, accuracy, and reliability of IAM operations. Identify opportunities to streamline processes, reduce manual effort, and enhance service delivery in alignment with best practices and security baselines.
• Perform identity life cycle management activities, including the creation, modification, provisioning, de-provisioning, and reconciliation of accounts and AI agents across institutional systems. Ensure identities are provisioned accurately, consistently, and in compliance with university policies, standards, and regulatory requirements.
• Using industry leading tools such as CrowdStrike, monitor identity related security events, analyze authentication anomalies, and support security operations and incident response activities. Where possible, automate or use AI for remediation and implement preventive controls to reduce the risk of account compromise and unauthorized access.
• Support access governance functions by maintaining role based access models, entitlement structures, and authorization controls. Collaborate with the Application Role Security team to support access reviews, audit activities, and compliance with internal controls and external regulatory requirements.

Benefits

• Medical, Dental, Vision, Life Insurance, Flexible Spending, and Employee Assistance Program
• Paid time off, including annual and sick time off and paid holidays
• Retirement savings options
• Employee discounts, including tickets to many Orlando attractions
• Education assistance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior