Responsible for the administration, support, and optimization of Identity and Access Management (IAM) services to ensure secure and reliable access to institutional systems and applications. Manages user account lifecycle processes, access management technologies, and access-related support activities. Oversees IP address management services, including DNS and DHCP, as well as SSL certificate administration and reverse proxy configurations. Partners with cross-functional teams to implement, enhance, and support innovative technology solutions that strengthen security, improve operational efficiency, and advance the institution's strategic objectives.

Supports multiple projects and technology initiatives, with an emphasis on researching, evaluating, and operationalizing emerging technologies, best practices, and innovative solutions. Actively contributes to the identification and implementation of process improvements that enhance operational efficiency, security, and service delivery. Demonstrates a commitment to continuous professional development by pursuing ongoing learning opportunities, maintaining technical expertise, and staying current with evolving industry trends and technologies.

Internal title: IT Security Associate; Working title: Identity & Access Management Engineer

Job Duties

• Responsible for the administration, support, and continuous improvement of Identity and Access Management (IAM) services and related infrastructure to ensure secure, reliable, and efficient access to BCM systems and applications. This position works closely with infrastructure, security, application, and support teams to deliver secure identity, access, and network services across the enterprise.
• Administer and support IAM services, including user account provisioning, authentication, authorization, and access governance.
• Support user lifecycle management processes by ensuring provisioning systems are operational, reliable, and continuously optimized through process improvements and enhancements.
• Manage and maintain authentication and access management technologies, ensuring service availability and facilitating the onboarding and integration of new applications.
• Provide Tier 2 support by resolving incidents, fulfilling service requests, implementing approved changes, and completing assigned tasks through the organization's IT service management platform.
• Collaborate with IT teams and business units to investigate, troubleshoot, and resolve access-related issues across the BCM environment.
• Administer the IP Address Management (IPAM) solution, including DNS and DHCP services, IP address allocation, record management, system upgrades, and issue resolution.
• Manage the organization's SSL certificate infrastructure, including the issuance, renewal, installation, and lifecycle management of digital certificates; support and advance certificate automation initiatives.
• Configure and maintain F5 reverse proxies and related application delivery services to support secure application access.
• Process and fulfill DNS and static IP address requests while troubleshooting network name-resolution and address-assignment issues.
• Partner with cross-functional teams on strategic initiatives, technology implementations, system upgrades, and infrastructure projects requiring IAM expertise.
• Develop, maintain, and enhance technical documentation, operational procedures, knowledge articles, and process documentation related to Identity and Access Services.
• Monitor service health, identify opportunities for operational improvements, and implement best practices to enhance security, reliability, and efficiency.
• Perform other job related duties as assigned.

Minimum Qualifications

• Bachelor's degree. Four years of relevant experience may substitute for degree requirement.
• Two years of relevant experience.

Preferred Qualifications

• Experience with scripting, AI agents and Entra ID.