Identity Systems Engineer III

Responsibilities:

Enterprise Identity Platform Engineering and Operations

Support designing, configuring and administrating cloud-based identity systems and integrations including those from Microsoft Entra ID, Amazon Web Services, and Google Cloud Platform. Implement and maintain appropriate access policies, modern authentication methods, risk reducing identity protection controls and associated cloud identity services. Implement security best practices to support the institution’s overall security posture and reliable operation of enterprise authentication and authorization services.

Support the integration of institutional applications and systems with IAM platforms using SAML, OAuth, OIDC, SCIM, and related technologies. Work with campus partners and vendors to ensure secure, standards based interoperability and timely resolution of access related requests.

Maintain IAM related on-premise infrastructure, including on premises and cloud data center servers, ensuring systems are patched, updated, and aligned with institutional security standards. Support directory synchronization services, connectors, agents, and other IAM platform components to ensure operational stability.

Create and maintain technical documentation, standard operating procedures, and knowledge resources. Provide tier three technical guidance and support to campus stakeholders, collaborates with IT and information security teams, and contributes to planning and continuous improvement of IAM services. Other duties as assigned.

Artificial Intelligence Identity Lifecycle Management

Develop and maintain automation scripts, workflows, and tools including AI to improve the efficiency, accuracy, and reliability of IAM operations. Identify opportunities to streamline processes, reduce manual effort, and enhance service delivery in alignment with best practices and security baselines.

Perform identity life cycle management activities, including the creation, modification, provisioning, de-provisioning, and reconciliation of accounts and AI agents across institutional systems. Ensure identities are provisioned accurately, consistently, and in compliance with university policies, standards, and regulatory requirements.

Identity Security and Risk Reduction

Using industry leading tools such as CrowdStrike, monitor identity related security events, analyze authentication anomalies, and support security operations and incident response activities. Where possible, automate or use AI for remediation and implement preventive controls to reduce the risk of account compromise and unauthorized access.

Support access governance functions by maintaining role based access models, entitlement structures, and authorization controls. Collaborate with the Application Role Security team to support access reviews, audit activities, and compliance with internal controls and external regulatory requirements.

Minimum Qualifications:

Bachelor’s degree and 4 years of relevant experience; or High School Diploma (or equivalent) and 8 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).

Preferred Qualifications:

Experience engineering administering and supporting cloud-based Identity and Access Management (IAM) platforms, including Microsoft Entra ID (Azure AD), Amazon Web Services (AWS), Google Cloud Platform (GCP), or similar enterprise identity solutions.

Experience implementing, securing, and supporting identity federation and provisioning technologies such as SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Active Directory integrations.

Experience monitoring, responding, and automating the response to identity-related security events using detection and response or security operations tools.

Experience developing automation solutions and management such as the life cycle workflows of AI agents, scripts, or workflows.

Experience supporting access governance, regulatory compliance, and identity lifecycle management in a large organization, preferably within higher education or a public-sector institution.