Posted Job Title

IAM Engineer

Job Profile Title

Systems Administrator C

Job Description Summary

The Identity and Access Management (IAM) Engineer provides technical and operational support for the University's Identity and Access Management (IAM) services. The role supports authentication, authorization, access provisioning, multifactor authentication, public key infrastructure, SSL/TLS certificate operations, and related security technologies. The position is primarily operational and consultative, emphasizing configuration, troubleshooting, service reliability, customer support, documentation, and automation rather than custom software development. The successful candidate will be a self-starter who can work independently, learn new technologies quickly, and collaborate with support teams, application owners, vendors, and other ISC colleagues.

Job Description

Job Responsibilities:

• Provide day-to-day operational support for IAM and access management services, including MFA, access provisioning, authentication and authorization support, and service monitoring.

• Troubleshoot access, login, certificate, provisioning, and related service issues; coordinate with the support desk, application owners, customers, vendors, and internal technical teams.

• Configure and maintain existing IAM services and related security controls, including role-based and attribute-based access concepts, SSL/TLS certificates, PKI-related services, and selected directory or identity repository functions.

• Support Linux-based IAM service hosts and cloud-hosted service components, including patching coordination, maintenance, monitoring, and operational readiness.

• Develop scripts, reports, documentation, and lightweight automation to improve repeatability, reduce operational toil, validate access controls, support metrics, and assist with service transition orretirement efforts.

• Provide secondary/backfill support for SSO and federation-related work using technologies such as SAML, OAuth, and OIDC, without serving as the primary SSO engineer.

• Participate in a shared on-call rotation for critical IAM services. Off-hours incidents are infrequent, but periodic scheduled maintenance may occur outside normal business hours.

• Other duties and responsibilities as assigned

Qualifications:

• Bachelor's degree and 2-3 years of related experience in identity and access management, information security, systems administration, application support, or a related technical operations role, or equivalent combination of education and experience is required.

• Experience should include operational support of production systems, troubleshooting complex technical issues, working with customers or support teams, and using scripting or automation to improve reliability and repeatability.

• Candidates should be comfortable working independently with limited supervision, communicating clearly with technical and non-technical stakeholders, and learning new IAM and security technologies as service needs evolve.

Job Location - City, State

Philadelphia, Pennsylvania

Information Systems & Computing (ISC) is the University of Pennsylvania’s central IT organization, providing the core network, data, voice, video, and enterprise application infrastructure and services upon which Penn’s numerous Schools and Centers build their unique tools and capabilities.

ISC’s 300-plus employees work closely with the University’s IT organizations in order to create, deliver and support products and services that help Schools and Centers operate efficiently and effectively. We strive to be easy to work with, and to serve as a trusted advisor to Penn’s IT community, faculty, staff and students in support of an environment of discovery and progress.

ISC’s focus on customer service and the high-quality, cost-effective, reliable implementation of modern IT solutions advances the mission of the University, as well as that of each individual School and Center. At Penn, technological freedom and departmental autonomy represent dearly held core values. ISC supports those ideas by providing foundational services and cogent counsel, empowering individuals and departments to employ their distinct strengths in support of their goals.

Learn more about us by visiting: or www.linkedin.com/company/penn-information-systems-computing/

Department / School

Information Systems and Computing

Pay Range

$71,733.00 - $90,000.00 Annual Rate

Salary offers are made based on the candidate’s qualifications, experience, skills, and education as they directly relate to the requirements of the position, and in alignment with salary ranges based on external market data for the job’s level. Internal organization and peer data at Penn are also considered.

University Benefits

• Health, Life, and Flexible Spending Accounts: Penn offers comprehensive medical, prescription, behavioral health, dental, vision, and life insurance benefits to protect you and your family’s health and welfare. You can also use flexible spending accounts to pay for eligible health care and dependent care expenses with pre-tax dollars.

• Tuition: Take advantage of Penn's exceptional tuition benefits. You, your spouse, and your dependent children can get tuition assistance here at Penn. Your dependent children are also eligible for tuition assistance at other institutions.

• Retirement: Penn offers generous retirement plans to help you save for your future. Penn’s Basic, Matching, and Supplemental retirement plans allow you to save for retirement on a pre-tax or Roth basis. Choose from a wide variety of investment options through TIAA and Vanguard.

• Time Away from Work: Penn provides you with a substantial amount of time away from work during the course of the year. This allows you to relax, take vacations, attend to personal affairs, recover from illness or injury, spend time with family—whatever your personal needs may be.

• Long-Term Care Insurance: In partnership with Genworth Financial, Penn offers faculty and staff (and your eligible family members) long-term care insurance to help you cover some of the costs of long-term care services received at home, in the community or in a nursing facility. If you apply when you’re newly hired, you won’t have to provide proof of good health or be subject to underwriting requirements. Eligible family members must always provide proof of good health and are subject to underwriting.

• Wellness and Work-life Resources: Penn is committed to supporting our faculty and staff as they balance the competing demands of work and personal life. That’s why we offer a wide variety of programs and resources to help you care for your health, your family, and your work-life balance.

• Professional and Personal Development: Penn provides an array of resources to help you advance yourself personally and professionally.

• University Resources: As a member of the Penn community, you have access to a wide range of University resources as w