Sr. IAM System Admin

As a community, the University of Rochester is defined by a deep commitment to Meliora - Ever Better. Embedded in that ideal are the values we share: equity, leadership, integrity, openness, respect, and accountability. Together, we will set the highest standards for how we treat each other to ensure our community is welcoming to all and is a place where all can thrive.

Job Location (Full Address):

60 Corporate Woods, Brighton, New York, United States of America, 14623

Opening:

Worker Subtype:

Regular

Time Type:

Full time

Scheduled Weekly Hours:

40

Department:

100086 University IT / IS

Work Shift:

UR - Day (United States of America)

Range:

UR URG 111

Compensation Range:

$63,815.00 - $95,723.00

Responsibilities:

Serves as the lead administrator and provides technical expertise related to identity and user account management, including troubleshooting and operational support of University managed directory stores. Leads the University's two-factor authentication and privileged account management solutions. Supports all team function. Participates in on-call rotation. Mentors and/or trains new or lower level staff.

Serves as the Lead Administrator and provides technical expertise related to identity and user account management, including troubleshooting and operational support of University managed directory stores. Supports the University's two-factor authentication and privileged account management solutions. Supports all team function. Participates in on-call.

RESPONSIBILITIES:

- Leads the installation, support and maintenance of Identify Access Management (IAM), Privileged Account Management, Two-factor Authentication and Password Vaulting tools, including ensuring patching and disaster recovery activities are in compliance with University IT standards.

- Leads quality assurance testing by creating test plans, staging test data and coordinating the execution of integrated testing cycles.

- Leads the implementation of IAM projects and works closely with security team and business stakeholder to understand, document and translate requirements into secure and scalable solutions.

- Drives best practice change management and ensures administrative documentation is organized and maintained. Serves as IAM lead during Incident Management events.

- Maintains deep knowledge of technology, equipment and/or systems deployed within the IAM environment. Continuously improves knowledge of business processes related to securing identities and access.

- Provides on-call and after-hours support as required.

Other duties as assigned

QUALIFICATIONS:

- Bachelor's degree in related discipline such as Computer Science, Business, Mathematics, Statistics, Science or Engineering required.

- 4 years of relevant experience required.

- or equivalent combination of education and experience required.

- Experience with MS Active Directory, LDAP, relational databases and access management systems required.

- Experience with role-based access control, account onboarding processes and system integrations required.

- Experience with PowerShell, Javascript or UNIX shell scripting required.

- Experience with writing advanced level queries for relational databases (Oracle, MS SQL, MySQL, etc.) required.

- Experience with two-factor authentication and privileged account management tools required.

- Project management and work coordination skills required.

- Ability to translate business needs into solution requirements required.

- Ability to prioritize and complete tasks within defined timelines required.

- Excellent written and verbal communication skills with peers and leadership required.
 

The University of Rochester is committed to fostering, cultivating, and preserving an inclusive and welcoming culture to advance the University’s Mission to Learn, Discover, Heal, Create – and Make the World Ever Better. In support of our values and those of our society, the University is committed to not discriminating on the basis of age, color, disability, ethnicity, gender identity or expression, genetic information, marital status, military/veteran status, national origin, race, religion/creed, sex, sexual orientation, citizenship status, or any other characteristic protected by federal, state, or local law (Protected Classes). This commitment extends to non-discrimination in the administration of our policies, admissions, employment, access, and recruitment of candidates for all persons consistent with our values and based on applicable law.