Posted Job Title
IAM Architect

Job Profile Title
Information Technology Architect

Job Description Summary
Information Systems & Computing (ISC) is the University of Pennsylvania's central IT organization, providing the core network, data, voice, video, and enterprise application infrastructure and services upon which Penn's numerous Schools and Centers build their unique tools and capabilities.

ISC's 300-plus employees work closely with the University's IT organizations in order to create, deliver and support products and services that help Schools and Centers operate efficiently and effectively. We strive to be easy to work with, and to serve as a trusted advisor to Penn's IT community, faculty, staff and students in support of an environment of discovery and progress.

ISC's focus on customer service and the high-quality, cost-effective, reliable implementation of modern IT solutions advances the mission of the University, as well as that of each individual School and Center. At Penn, technological freedom and departmental autonomy represent dearly held core values. ISC supports those ideas by providing foundational services and cogent counsel, empowering individuals and departments to employ their distinct strengths in support of their goals.

Learn more about us by visiting https://www.isc.upenn.edu/about on www.linkedin.com/company/penn-information-systems-computing/.

The Identity and Access Management (IAM) Architect provides technical leadership for the design, evolution, integration, and support strategy of the University's Identity and Access Management (IAM) services. This position has a strong focus on multifactor authentication, authentication architecture, authorization services, federation, public key infrastructure, SSL/TLS, and related security technologies. The architect collaborates with Information Security, IAM service teams, application owners, vendors, and other ISC stakeholders to develop secure, scalable, usable, and reliable IAM capabilities. This role balances security, usability, privacy, availability, and operational requirements while providing technical direction, architectural documentation, service improvement recommendations, and guidance to technical staff.

Job Description

Job Responsibilities

• Provide technical direction and support for IAM services, including authentication, authorization, federation, MFA, PKI, SSL/TLS, and related security technologies.
• Provide senior technical support for multifactor authentication services, including policy design, enrollment and recovery patterns, support strategy, assurance levels, usability, and security improvement initiatives.
• Design and review complex IAM solutions and integration patterns using standards such as SAML, OAuth, OIDC, certificate-based trust, RBAC, ABAC, and related access management models.
• Partner with Information Security, IAM operations, application owners, vendors, and campus stakeholders to assess requirements, evaluate risk, and recommend secure and supportable IAM approaches.
• Establishes and follows architectural standards, design patterns, documentation, and operational best practices to improve IAM reliability, repeatability, transparency, and security.
• Evaluate emerging IAM and authentication technologies, including passwordless authentication, WebAuthn/FIDO2, CIAM patterns, adaptive or risk-based authentication, and MFA service enhancements.
• Provide escalation support, mentoring, and technical guidance to engineers and support teams; participate in planning for incidents, service changes, and scheduled maintenance as needed.
• Other duties and responsibilities as assigned.

Qualifications

• Bachelor's degree and 4 to 6 years of experience or equivalent combination of education and experience is required.
• Previous experience in the following areas: identity and access management, information security, systems architecture, and/or a related technical field.
• Experience should include architectural design or senior technical leadership for IAM or security services; strong knowledge of multifactor authentication, authentication and authorization models, federation standards, PKI, SSL/TLS, and secure systems design; and the ability to communicate complex technical decisions to technical and non-technical stakeholders.
• The successful candidate must be able to operate independently, manage ambiguity, guide others through complex technical problems, and balance security, usability, availability, and operational support needs.

Job Location - City, State
Philadelphia, Pennsylvania

Department / School
Information Systems and Computing

Pay Range
$101,750.00 - $135,000.00 Annual Rate
Salary offers are made based on the candidate's qualifications, experience, skills, and education as they directly relate to the requirements of the position, and in alignment with salary ranges based on external market data for the job's level. Internal organization and peer data at Penn are also considered.

University Benefits

• Health, Life, and Flexible Spending Accounts: Penn offers comprehensive medical, prescription, behavioral health, dental, vision, and life insurance benefits to protect you and your family's health and welfare. You can also use flexible spending accounts to pay for eligible health care and dependent care expenses with pre-tax dollars.
• Tuition: Take advantage of Penn's exceptional tuition benefits. You, your spouse, and your dependent children can get tuition assistance here at Penn. Your dependent children are also eligible for tuition assistance at other institutions.
• Retirement: Penn offers generous retirement plans to help you save for your future. Penn's Basic, Matching, and Supplemental retirement plans allow you to save for retirement on a pre-tax or Roth basis. Choose from a wide variety of investment options through TIAA and Vanguard.
• Time Away from Work: Penn provides you with a substantial amount of time away from work during the course of the year. This allows you to relax, take vacations, attend to personal affairs, recover from illness or injury, spend time with family-whatever your personal needs may be.
• Long-Term Care Insurance: In partnership with Genworth Financial, Penn offers faculty and staff (and your eligible family members) long-term care insurance to help you cover some of the costs of long-term care services received at home, in the community or in a nursing facility. If you apply when you're newly hired, you won't have to provide proof of good health or be subject to underwriting requirements. Eligible family members must always provide proof of good health and are subject to underwriting.
• Wellness and Work-life Resources: Penn is committed to supporting our faculty and staff as they balance the competing demands of work and personal life. That's why we offer a wide variety of programs and resources to help you care for your health, your family, and your work-life balance.
• Professional and Personal Development: Penn provides an array of resources to help you advance yourself personally and professionally.
• University Resources: As a member of the Penn community, you have access to a wide range of University resources as well as cultural and recreational activities. Take advantage of the University's libraries and athletic facilities, or visit our arboretum and art galleries. There's always something going on at Penn, whether it's a new exhibit at the Penn Museum, the latest music or theater presentation at the Annenberg Center, or the Penn Relays at Franklin Field to name just a few examples. As a member of the Penn community, you're right in the middle of the excitement-and you and your family can enjoy many of these activities for free.
• Discounts and Special Services: From arts and entertainment to transportation and mortgages, you'll find great deals for University faculty and staff. Not only do Penn arts and cultural centers and museums offer free and discounted admission and memberships to faculty and staff. You can also enjoy substantial savings on other goods and services such as new cars from Ford and General Motors, cellular phone service plans, movie tickets, and admission to theme parks.
• Flexible Work Hours: Flexible work options offer creative approaches for completing work while promoting balance between work and personal commitments. These approaches involve use of non-traditional work hours, locations, and/or job structures.
• Penn Home Ownership Services: Penn offers a forgivable loan for eligible employees interested in buying a home or currently residing in West Philadelphia, which can be used for closing costs or home improvements.
• Adoption Assistance: Penn will reimburse eligible employees on qualified expenses in connection with the legal adoption of an eligible child, such as travel or court fees, for up to two adoptions in your household.

To learn more, please visit: https://www.hr.upenn.edu/PennHR/benefits-pay