Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Lead Identity & Access Management Engineer role.
Rezi rewrites your resume against UMass Amherst's job description. Free.
Tailor your resume to this Lead Identity & Access Management Engineer role.
Rezi rewrites your resume against UMass Amherst's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Lead Identity & Access Management Engineer posting at UMass Amherst — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Lead Identity & Access Management Engineer posting at UMass Amherst — free, in seconds.
About the Role
The Lead Identity & Access Management (IAM) Engineer provides technical leadership for the university's enterprise-wide IAM program, focusing on designing, implementing, and improving authentication, authorization, provisioning, and governance solutions. This role drives the technical vision for IAM services, ensures alignment with security and compliance requirements, and manages risks associated with the university's IAM posture.
Responsibilities
- Provide technical leadership and inform strategic direction for the university's IAM ecosystem.
- Collaborate on the architectural design, development, and documentation of IAM systems in on-premises and cloud environments.
- Configure and maintain the Identity Governance and Administration platform(s).
- Design and implement enterprise IAM service architecture including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation.
- Analyze complex technical problems and develop innovative solutions.
- Research and evaluate available solutions, recommend adoption strategies, and lead integration efforts.
- Install, configure, and maintain operating system components, applications, and integrations supporting IAM infrastructure.
- Collaborate with stakeholders to implement appropriate IAM standards and best practices.
- Manage and optimize user provisioning and de-provisioning processes.
- Ensure periodic access reviews and access certifications are performed, documented, and remediated.
- Apply appropriate levels of IAM related auditing and monitoring across university systems.
- Collaborate with IT security team, system administrators, stakeholders, and vendors to integrate IAM solutions.
- Regularly review, evaluate, and update access policies.
- Communicate effectively with customers and stakeholders to elicit requirements, present solutions, and resolve issues.
- Ensure IAM systems remain in documented compliance with relevant frameworks, regulations, and agreements.
- Research, recommend, and promote IT security policies and guidelines.
- Monitor and audit access controls to prevent unauthorized access and detect anomalous activity.
- Participate in incident response and security incident investigations related to access control breaches.
- Stay informed about industry trends and emerging technologies related to IAM.
- Represent the IAM function in university-wide committees, working groups, and governance bodies.
- Perform other duties as requested or required.
Requirements
- Bachelor's degree in computer science, information technology, cybersecurity, or related field with more than 9 years of progressive professional IT experience, OR Associate's degree in computer science, information technology, cybersecurity, or related field with more than 11 years of progressive professional IT experience.
- 5 years of experience focused on identity and access management.
- 2 years of experience in a technical lead or team lead capacity.
- Demonstrated expertise in identity and access management systems (e.g., Active Directory, Azure AD/Entra ID, LDAP, identity governance platforms).
- Strong knowledge of security protocols and authentication methods (e.g., SAML, OAuth 2.0, OpenID Connect, Kerberos, RADIUS).
- Strong understanding of and experience with information security frameworks, privacy laws, and regulatory requirements (e.g., NIST, FERPA, HIPAA, PCI-DSS).
- Demonstrated experience in architectural design and implementation of identity and access management best practices.
- Proficiency in identity lifecycle management, including automated provisioning, de-provisioning, and access certification processes.
- Experience with cloud-based identity management solutions and hybrid identity architectures.
- Excellent written and verbal communication skills.
- Demonstrated ability to lead technical teams, set priorities, and drive projects to completion.
- Excellent organizational and time management skills.
- Strong problem-solving and analytical skills.
- Excellent customer service skills.
- Ability to work in a fast-paced team environment and quickly adapt to new technologies.
- Master's degree in computer science, cybersecurity, information technology, or a relevant field (Preferred).
- Industry certifications such as CISSP, CISM, CISA, or vendor-specific IAM certifications (Preferred).
- Expert knowledge of Fischer Identity, Azure AD (Entra ID)/SSO/Active Directory, and Cirrus Identity (Preferred).
- Expert knowledge of access control models including RBAC, ABAC, and PBAC (Preferred).
- Experience in higher education or other large, complex organizations (Preferred).
- Experience with identity governance and administration (IGA) platforms and workflows (Preferred).
- Knowledge of zero trust architecture principles (Preferred).
- Experience with API security, service accounts, and non-person entity management (Preferred).
- Supervisory experience managing a small team (Preferred).
- Excellent policy and procedure development skills (Preferred).
Skills
- Identity and Access Management (IAM)
- Active Directory
- Azure AD/Entra ID
- LDAP
- Identity Governance Platforms
- SAML
- OAuth 2.0
- OpenID Connect
- Kerberos
- RADIUS
- NIST
- FERPA
- HIPAA
- PCI-DSS
- CMMC
- Identity Lifecycle Management
- Automated Provisioning
- De-provisioning
- Access Certification
- Cloud-based Identity Management
- Hybrid Identity Architectures
- Fischer Identity
- Cirrus Identity
- RBAC
- ABAC
- PBAC
- Zero Trust Architecture
- API Security
- Service Accounts
- Non-person Entity Management
- Policy and Procedure Development
Location
- Amherst
Work Type
- Full Time
- Hybrid
Experience Level
- Lead
- More than 9 years of progressive professional IT experience
- More than 11 years of progressive professional IT experience
- 5 years of experience focused on identity and access management
- 2 years of experience in a technical lead or team lead capacity
Education Level
- Bachelor's degree in computer science, information technology, cybersecurity, or related field
- Associate's degree in computer science, information technology, cybersecurity, or related field
- Master's degree in computer science, cybersecurity, information technology, or a relevant field
Salary/Compensations
- PSSAP Grade 29
- Professional Staff Hiring Ranges
About the Company
- The university's enterprise-wide identity and access management program is critical for securing systems, data, and services.
- This role operates within a complex higher education environment.