About the position
The Identity & Access Management (IAM) Analyst position at Texas State University-San Marcos is a critical role within the Systems Administration Team, responsible for securing the organization's systems and data. The ideal candidate will have a robust background in configuring, maintaining, and administering IAM systems for a large and complex organization. This role involves working closely with various business units, including human resources and information security, to ensure that the right individuals have appropriate access to resources at the right time. The IAM Analyst will be tasked with managing and maintaining the IAM platform, performing system administration tasks, and developing IAM workflows aligned with organizational objectives. As part of the Systems Administration Team, the IAM Analyst will engage in system administration tasks such as backups, restores, patching, configuration, and maintenance. The role requires configuring interfaces between systems to enable single-sign-on (SSO), federation, and other identity-related functions. The IAM Analyst will also be responsible for establishing identity and access management standards, procedures, policies, and guidelines in alignment with information assurance objectives. This includes writing, troubleshooting, and maintaining scripts for managing identity data and provisioning processes, as well as monitoring permissions and access requests to ensure compliance with the principle of least privilege. The position offers a flexible hybrid work environment, with the possibility of full-time remote work. The IAM Analyst will collaborate with cross-functional teams to gather requirements, provide technical insights, and contribute to the overall design and development process. The role is essential for maintaining consistency and compliance across the organization regarding the IAM framework, producing reports and metrics for identity management systems, and troubleshooting identity and authentication issues. The successful candidate will be a self-motivated, detail-oriented individual who enjoys solving complex problems and working as part of a team.
Responsibilities
- Manage and maintain IAM platform for Texas State University.
- Perform system administration tasks such as system backups, restore, patching, configuration, and maintenance.
- Configure interfaces between systems enabling single-sign-on (SSO), federation, and other identity related functions.
- Develop IAM workflows based on organizational objectives.
- Create and maintain documentation for IAM and related systems.
- Establish identity and access management standards, procedures, policies and guidelines in alignment with information assurance objectives and guidance from the Chief Information Security Officer.
- Write, troubleshoot, and maintain scripts for managing identity data, identity provisioning and deprovisioning, and importing and exporting identity data between systems.
- Define user roles and implement identity and access management tools within organizational systems and applications.
- Monitor permissions and grants/denies user access requests following the principle of least privilege.
- Maintain consistency and compliance across the organization regarding the IAM framework.
- Produce reports, dashboards, statistics, and metrics for identity management system and related systems.
- Plan and implement changes and updates to identity and access management systems.
- Troubleshoot and resolve identity and authentication issues.
- Collaborate with cross-functional teams to gather requirements, provide technical insights, and contribute to the overall design and development process.
- Perform other duties as assigned.
Requirements
- Experience with Active Directory and Azure AD.
- Experience with SSO and MFA solutions.
- Experience with RBAC and other access control models.
- Experience with scripting or automation platforms, such as Python, PowerShell, etc.
- Experience with team collaboration software (e.g. Microsoft Teams, SharePoint, or similar).
- Bachelor's degree or equivalent professional experience.
Nice-to-haves
- Experience with other IAM systems and technologies, such as Okta, SailPoint, Fischer Identity, etc.
- Experience with information security best practices in securing workloads.
- Experience with Shibboleth (SAML) authentication platform.
- Relevant IAM certification.
Benefits
- Amazing health insurance: various coverage options starting your first day of employment for full-time employees with Texas State paying 100% of the employee premium and 50% for your dependents!
- Generous paid time off: vacation, holidays, sick days and many more!
- Excellent work-life balance resources: mother and family-friendly resources in addition to a comprehensive FREE wellness program.
- Great training and development opportunities: choose from a variety of classroom and online course offerings, learning resources, certifications, and employee educational support programs.
- An inclusive Bobcat community: join our many social networks offered on and off-campus.
- Retirement peace of mind: TRS pension, retirement plans and voluntary saving options with generous employer contributions.
