Full Job Description
Job Requisition ID:
Time Type:
Full time
Employee Group:
Staff
Job Category:
IT Security
Employment Type:
Permanent
Department:
Information Systems and Technology - Information Security Services
Hiring Range:
$113,285.63 - $141,607.03
Posting Information:This posting is for an existing vacancy.
Internal posting expires Friday October 16th at 11:59 PM
Job Description:
Primary Purpose
The Identity and Access Management (IAM) group mandate is to provide strategic leadership on the long-term direction of Identity and Access Management while also overseeing maintenance and operations of the primary systems relating to how identities are handled within information systems on campus. This position is accountable to the Chief Information Security Officer (CISO) for the management of the people and technologies related to IAM. The IAM Manager works closely with leadership in IST and across campus, as well as other institutions of higher education, on projects of mutual interest.
Key Accountabilities
Establishes the direction and priorities of IAM at Waterloo
• Ensure standardization of processes and procedures in line with best practice, and maintenance of documentation and support materials ensuring business continuity and consistency of practice in collaboration with ISS and other IST staff.
• Oversees development and management of roadmaps to implement requirements from groups both within and outside of IST and communicates impacts and co-ordinates with impacted groups to ensure smooth operations through updates and new releases.
• Ensures most appropriate technologies and enhancements are selected, balancing the achieving best practice in IAM, cost and resource efficiency, and supporting the needs of campus users.
Liaison & relationships
• Act as a member of the IST management team and represent IST in campus-wide projects and committees, providing expertise and guidance as it relates to identity and access management.
• Collaborate with campus and faculty IT to determine pathways for integrating identity and access management into existing and new processes, and sponsor projects and initiatives that will enable a more coordinated approach to identity and access management.
• Participate in and ensure regular communication and collaboration with identity and access management and other related groups or committees to enable appropriate decition making and change management.
• Build relationships with similar IT groups at other universities, and with external vendors. Manage relationships with vendors, escalate issues and monitor agreements to ensure Waterloo is receiving appropriate support and delivery of products.
Within the IAM group, ensures the effective use of staff time and capital resources
• Oversees hiring and overall management of the IAM group.
• Coaches, trains, and develops employees to enable their professional development.
• Approves performance plans and conducts regular reviews with direct reports.
• Ensures appropriate documentation is generated and maintained.
Core services
• Plan for and maintain appropriate responses to recover from failures of critical IAM services.
• Schedule operational and project tasks, assign staff, monitor performance, manage risks, and report progress.
• Collaborate with staff to determine the purpose of projects, the general outcomes expected, and the required completion timeframe.
• Monitor and plan for appropriate resource capacity based on operational and project requests and priorities.
• Comply with and promote the University's policies and guidelines related to information systems and technology.
Contribute to an information security culture at the University of Waterloo
• Works with IST leadership to respond to audit findings as appropriate.
• Collaborates with campus IT groups to ensure best practices for IAM are being followed.
Required Qualifications
Education
• University degree in a related field or equivalent education and experience.
Experience
• 2-4 years of leadership responsibility managing midsized teams and influencing senior-level management and key stakeholders.
• At least 7 years of progressive experience in IT.
Knowledge/Skills/Abilities
• Sailpoint IAM on-premise: integrations, operations
• Microsoft Active Directory, EntraID Hybrid: integrations
• Cisco Duo MFA: integrations, operations
• Oracle Peoplesoft: integrations
• Workday: integrations
• Brightspace: integrations
• Grouper: integrations, operations, administration
• Shibboleth: integrations, operations, administration
• ADFS: integrations
• Databases: Postgres, MS SQL, Oracle: basic familiarity, queries
• At least one programming language, e.g. Java, Python: basic familiarity
• Strong understanding of IAM concepts such as role-based access, lifecycle management, multi-factor in a diverse environment
• Strong understanding of University processes related to accounts management, identity management
• Change management
• Demonstrated ability to explain complex technical concepts to leadership and to present business cases for approval or support
• Demonstrated ability to make and communicate difficult decisions and to assess and determine priorities, while also building positive relationships across campus IT and with leadership
• Proven capacity to create, maintain, and own a large, complex solution roadmap
• Deductive and investigative skills to identify and diagnose complex, non-intuitive problems
• Experience in collaborating on RFPs and negotiating vendor agreements is preferred
