IAM Architect

IAM Architect The University of Pennsylvania, the largest private employer in Philadelphia, is a world‑renowned leader in education, research,and innovation. This historic, Ivy League school consistently ranksamong the top 10 universities in the annual U.S. News & WorldReport survey. Penn has 12 highly-regarded schools that provideopportunities for undergraduate, graduate and continuing education,all influenced by Penn's distinctive interdisciplinary approach to scholarship and learning. As an employer Penn has been rankednationally on many occasions with the most recent award from Forbeswho named Penn one of America's Best Large Employers in 2023. Penn offers a unique working environment within the city of Philadelphia. The University is situated on a beautiful urbancampus, with easy access to a range of educational, cultural, andrecreational activities. With its historical significance andlandmarks, lively cultural offerings, and wide variety ofatmospheres, Philadelphia is the perfect place to call home forwork and play. The University offers a competitive benefits package that includesexcellent healthcare and tuition benefits for employees and theirfamilies, generous retirement benefits, a wide variety ofprofessional development opportunities, supportive work and familybenefits, a wealth of health and wellness programs and resources,and much more. Posted Job Title IAM Architect Job Profile Title Information Technology Architect Job Description Summary Information Systems & Computing (ISC) is the University ofPennsylvania's central IT organization, providing the core network,data, voice, video, and enterprise application infrastructure andservices upon which Penn's numerous Schools and Centers build theirunique tools and capabilities. ISC's 300-plus employees work closely with the University's ITorganizations in order to create, deliver and support products andservices that help Schools and Centers operate efficiently andeffectively. We strive to be easy to work with, and to serve as atrusted advisor to Penn's IT community, faculty, staff and studentsin support of an environment of discovery and progress. ISC's focus on customer service and the high-quality,cost-effective, reliable implementation of modern IT solutionsadvances the mission of the University, as well as that of eachindividual School and Center. At Penn, technological freedom anddepartmental autonomy represent dearly held core values. ISCsupports those ideas by providing foundational services and cogentcounsel, empowering individuals and departments to employtheirdistinct strengths in support of their goals. Learn more about us by visiting on The Identity and Access Management (IAM) Architect providestechnical leadership for the design, evolution, integration, andsupport strategy of the University's Identity and Access Management(IAM) services. This position has a strong focus on multifactorauthentication, authentication architecture, authorizationservices, federation, public key infrastructure, SSL/TLS, andrelated security technologies. The architect collaborates withInformation Security, IAM service teams, application owners,vendors, and other ISC stakeholders to develop secure, scalable,usable, and reliable IAM capabilities. This role balances security,usability, privacy, availability, and operational requirementswhile providing technical direction, architectural documentation,service improvement recommendations, and guidance to technicalstaff. Job Description Job Responsibilities Provide technical direction and support for IAM services,including authentication, authorization, federation, MFA, PKI,SSL/TLS, and related security technologies. Provide senior technical support for multifactor authenticationservices, including policy design, enrollment and recoverypatterns, support strategy, assurance levels, usability, andsecurity improvement initiatives. Design and review complex IAM solutions and integrationpatterns using standards such as SAML, OAuth, OIDC,certificate-based trust, RBAC, ABAC, and related access managementmodels. Partner with Information Security, IAM operations, applicationowners, vendors, and campus stakeholders to assess requirements,evaluate risk, and recommend secure and supportable IAMapproaches. Establishes and follows architectural standards, designpatterns, documentation, and operational best practices to improveIAM reliability, repeatability, transparency, and security. Evaluate emerging IAM and authentication technologies,including passwordless authentication, WebAuthn/FIDO2, CIAMpatterns, adaptive or risk-based authentication, and MFA serviceenhancements. Provide escalation support, mentoring, and technical guidanceto engineers and support teams; participate in planning forincidents, service changes, and scheduled maintenance asneeded. Other duties and responsibilities as assigned. Qualifications Bachelor's degree and 4 to 6 years of experience or equivalentcombination of education and experience is required. Previous experience in the following areas: identity and accessmanagement, information security, systems architecture, and/or arelated technical field. Experience should include architectural design or seniortechnical leadership for IAM or security services; strong knowledgeof multifactor authentication, authentication and authorizationmodels, federation standards, PKI, SSL/TLS, and secure systemsdesign; and the ability to communicate complex technical decisionsto technical and non-technical stakeholders. The successful candidate must be able to operate independently,manage ambiguity, guide others through complex technical problems,and balance security, usability, availability, and operationalsupport needs. Job Location - City, State Philadelphia, Pennsylvania Department / School Information Systems and Computing Pay Range $101,750.00 - $135,000.00 Annual Rate Salary offers are made based on the candidate's qualifications,experience, skills, and education as they directly relate to therequirements of the position, and in alignment with salary rangesbased on external market data for the job's level. Internalorganization and peer data at Penn are also considered. Equal Opportunity Statement The University of Pennsylvania is an equal opportunity employer.Candidates are considered for employment without regard to race,color, sex, sexual orientation, religion, creed, national origin(including shared ancestry or ethnic characteristics), citizenshipstatus, age, disability, veteran status or any class protectedunder applicable federal, state or local law. Special Requirements Background checks may be required after a conditional job offer ismade. Consideration of the background check will be tailored to therequirements of the job. University Benefits Health, Life, and Flexible Spending Accounts : Pennoffers comprehensive medical, prescription, behavioral health,dental, vision, and life insurance benefits to protect you and yourfamily's health and welfare. You can also use flexible spendingaccounts to pay for eligible health care and dependent careexpenses with pre-tax dollars. Tuition : Take advantage of Penn's exceptional tuitionbenefits. You, your spouse, and your dependent children can gettuition assistance here at Penn. Your dependent children are alsoeligible for tuition assistance at other institutions. Retirement: Penn offers generous retirement plans tohelp you save for your future. Penn's Basic, Matching, andSupplemental retirement plans allow you to save for retirement on apre-tax or Roth basis. Choose from a wide variety of investmentoptions through TIAA and Vanguard. Time Away from Work: Penn provides you with asubstantial amount of time away from work during the course of theyear. This allows you to relax, take vacations, attend to personalaffairs, recover from illness or injury, spend time withfamily-whatever your personal needs may be. Long-Term Care Insurance: In partnership with GenworthFinancial, Penn offers faculty and staff (and your eligible familymembers) long-term care insurance to help you cover some of thecosts of long-term care services received at home, in the communityor in a nursing facility. If you apply when you're newly hired, youwon't have to provide proof of good health or be subject tounderwriting requirements. Eligible family members must alwaysprovide proof of good health and are subject to underwriting. Wellness and Work-life Resources : Penn is committed tosupporting our faculty and staff as they balance the competingdemands of work and personal life. That's why we offer a widevariety of programs and resources to help you care for your health,your family, and your work-life balance. Professional and Personal Development: Penn provides anarray of resources to help you advance yourself personally andprofessionally. University Resources: As a member of the Penn community,you have access to a wide range of University resources as well ascultural and recreational activities. Take advantage of theUniversity's libraries and athletic facilities, or visit ourarboretum and art galleries. There's always something going on atPenn, whether it's a new exhibit at the Penn Museum, the latestmusic or theater presentation at the Annenberg Center, or the PennRelays at Franklin Field to name just a few examples. As a memberof the Penn community, you're right in the middle of theexcitement-and you and your family can enjoy many of theseactivities for free. Discounts and Special Services : From arts andentertainment to transportation and mortgages, you'll find greatdeals for University faculty and staff. Not only do Penn arts andcultural centers and museums offer free and discounted admissionand memberships to faculty and staff. You can also enjoysubstantial savings on other goods and services such as new carsfrom Ford and General Motors, cellular phone service plans, movietickets, and admission to theme parks. Flexible Work Hours: Flexible work options offercreative approaches for completing work while promoting balancebetween work and personal commitments. These approaches involve useof non-traditional work hours, locations, and/or jobstructures. Penn Home Ownership Services: Penn offers a forgivableloan for eligible employees interested in buying a home orcurrently residing in West Philadelphia, which can be used forclosing costs or home improvements. Adoption Assistance: Penn will reimburse eligibleemployees on qualified expenses in connection with the legaladoption of an eligible child, such as travel or court fees, for upto two adoptions in your household. #J-18808-Ljbffr