IAM Associate Engineer

Department: Information Security Office
Salary/Grade: ITS/79

Job Summary:

The IAM Associate Engineer provides support for complex environment(s). They provide knowledge, skillsets and subject matter expertise (SME) for provisioning/deprovisioning, federation, authentication and access management, and directory services; Linux based Architecture, infrastructure and identity integrations with various technologies and services.

In this role, you will apply your knowledge and skillsets to provide support, consultation, design services, testing, documentation and implementation for Sailpoint, Forgerock SSO, Forgerock DS(LDAP), Shibboleth/SAML and Linux based systems. That will include configuration/implementation of new functionality, versioning, modify existing set ups, and provide Tier 3 support for trouble shooting various issues or incidents. You will also provide an array of consultative information, guidance and/or assistance to various groups within NUIT as well as NU schools and units.

As an IAM Associate Engineer you will need to have acquired experience 1-3 years hands on with Sailpoint, SSO, Shibboleth/SAML Fed, Directory, and other Identity products. You will work to ensure that IAM systems/solutions are both resilient and adaptive to an evolving Identity landscape. The IAM Engineer works on IAM projects within the AM team and provides guidance to other staff, as well as ensures compliance with all security associated with NU, state, and federal rules and regulations. Works closely with stakeholders throughout Northwestern to implement IAM best practices and controls.

Please note: This position will be required to work a hybrid work schedule. That means there are some days required to be onsite at NU and other days remote.

There is occasional evening or weekend work to support IAM operations or project deployments.

This position will be required to participate in on-call schedule. That may result in occasional evening or weekend work.

Specific Responsibilities:

• Act as IAM point -of-contact for assigned IAM AM team product(s).
• Serve as Tier 3 support and an escalation point for domain technology issues that cannot be solved by Tier 1 and Tier 2 Support. Perform/Own root cause analysis, problem management, documentation and communication for Identity Environment(s).
• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, system and key processes, reviewing system logs and verifying completion of scheduled tasks/jobs.
• Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate trouble shooting steps.
• Ability to develop/code, test, integrate and deploy IAM AM team frameworks, systems and protocols.
• Ability to create scripting, read code, utilize Git for versioning and use an orchestration tool like (Cloudbees, Rundeck or other) for automation.
• Participate in projects in the design, development, testing, and implementation of technical solutions which advance strategic initiatives in IAM including projects affecting the overall posture of Northwestern University.
• Implement recommendations for assigned projects, in consultation with project team(s) and/or other NUIT staff.
• Draft and review documentation such as analyses of technical, administrative, or procedural issues; procedural documentation/playbooks; and team documentation.

Miscellaneous

Performs other duties as assigned.

Minimum Qualifications:

• Successful completion of a full 4-year course of study in an accredited college or university leading to a bachelor's or higher degree in a major such as computer science, information technology, or related; OR appropriate combination of education and experience.
• Ability to learn IAM technology such as provisioning/deprovisioning, SSO, SAML/Federation, LDAP/Directories, MFA, PAM, Group management or other relevant identity and access management technologies
• Ability to learn Linux operating systems and server hardware, Git version control, Cloudbees or other orchestration tools.
• Ability to learn problem resolution/Tier 3 troubleshooting, on call and incident response.
• Ability to learn monitoring and performance tuning for Linux operation systems including - connectivity, synchronization, replication, Iptables, certificate trusts, etc.
• Ability to learn and support IAM on premise systems, SAAS and Cloud based solutions.

Preferred Qualifications:

• Bachelor's degree in computer science or related field
• Experience in a higher education environment
• Experience Identity lifecycle management, system administration and operations.
• Knowledge of system administration/Experience with Sailpoint, Ping/Forgerock products, and I2 products or services.
• Desire to learn industry skillsets and certifications.
• Analytical skills with ability to relate to technical and non-technical personnel.

Target hiring range for this position will be between $80,297-$90,334 per year. Offered salary will be determined by the applicant's education, experience, knowledge, skills and abilities, as well as internal equity and alignment with market data

Benefits:
At Northwestern, we are proud to provide meaningful, competitive, high-quality health care plans, retirement benefits, tuition discounts and more! Visit us at https://www.northwestern.edu/hr/benefits/index.html to learn more.

Work-Life and Wellness:
Northwestern offers comprehensive programs and services to help you and your family navigate life's challenges and opportunities, and adopt and maintain healthy lifestyles.
We support flexible work arrangements where possible and programs to help you locate and pay for quality, affordable childcare and senior/adult care. Visit us at https://www.northwestern.edu/hr/benefits/work-life/index.html to learn more.

Professional Growth & Development:
Northwestern supports employee career development in all circumstances whether your workspace is on campus or at home. If you're interested in developing your professional potential or continuing your formal education, we offer a variety of tools and resources. Visit us at https://www.northwestern.edu/hr/learning/index.html to learn more.

Northwestern University is an Equal Opportunity Employer and does not discriminate on the basis of protected characteristics, including disability and veteran status. View Northwestern's non-discrimination statement. Job applicants who wish to request an accommodation in the application or hiring process should contact the Office of Civil Rights and Title IX Compliance. View additional information on the accommodations process.