IAM Engineer

Identity Access Management (IAM) Engineer

The Identity Access Management (IAM) Engineer designs, implements, and supports enterprise identity services that enable secure, reliable access to university systems, data, and applications. This role engineers and administers IAM solutions across the institution, including single sign-on (SSO) integrations for applications at Mines, authentication services, directory integrations, and identity lifecycle processes. The IAM Engineer advances identity services through automation, scalable design, and continuous improvement, and partners with stakeholders across IT and the institution to deliver solutions aligned with security, compliance, and operational best practices. This position currently operates in a hybrid work model with regular campus presence required. Work arrangements are subject to change based on institutional needs. The successful candidate must be able to commute to campus in Golden, Colorado.

Primary Responsibilities

• Design, implement, administer, and continuously improve enterprise IAM services and integrations that protect institutional systems, data, and applications.
• Configure and maintain IAM platforms, authentication services, directory services, and related integrations, including documentation, configuration standards, and operational procedures.
• Lead and support single sign-on (SSO) and multifactor authentication (MFA) integrations for applications at Mines through the university's enterprise identity platform, Okta, in partnership with vendors and campus stakeholders.
• Troubleshoot and resolve IAM-related issues, implement enhancements, and optimize services to improve reliability, performance, and user experience while minimizing technical debt.
• Create and maintain technical documentation, knowledge base content, and operational guidance, and provide knowledge transfer and training to support staff, system administrators, and other IT partners.
• Collaborate with teams across IT and institutional stakeholders to ensure identity services align with security, infrastructure, application, compliance, and business requirements.

Strategy Development

• Plan, design, and enhance IAM solutions, workflows, and automation that support scalable, consistent, and secure service delivery.
• Develop and refine role-based access models, identity lifecycle standards, and access governance practices that support appropriate access and operational efficiency.
• Evaluate current-state services and authentication patterns to identify modernization opportunities, improve usability, and strengthen long-term sustainability.

Outreach and Communications

• Provide guidance and training to support staff and partners to strengthen understanding of IAM services, support processes, and common user issues.
• Communicate planned maintenance, service disruptions, and other service impacts to appropriate stakeholders and support teams.
• Engage with campus partners and the broader professional community to understand identity-related needs, share knowledge, and support service improvement.
• Participate in relevant working groups, communities of practice, and institutional initiatives related to IAM and supporting technologies.

Minimum Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or a closely related field, or an equivalent combination of education and directly related experience.
• 5+ years of progressively responsible experience in information technology, cybersecurity, or identity and access management, including areas such as IAM engineering, systems administration, enterprise application integration, directory services, or authentication services.
• 4+ years of hands-on experience implementing, configuring, and supporting enterprise IAM platforms and related services, including single sign-on (SSO), multifactor authentication (MFA), directory integrations, and application onboarding.
• Experience with scripting, APIs, or automation tools used to support integrations, workflow automation, and operational efficiency.
• Hands-on experience with enterprise IAM technologies and protocols such as Okta, SailPoint, Ping Identity, Active Directory, LDAP, SAML, OAuth, OpenID Connect, or similar tools and standards.
• Knowledge of IAM architecture and core identity services, including single sign-on (SSO), multifactor authentication (MFA), directory services, role-based access, provisioning, and deprovisioning.
• Knowledge of information security principles and access governance practices, including least privilege, role governance, secure authentication, and audit readiness.
• Ability to troubleshoot complex technical issues, evaluate solution options, and implement sustainable improvements in a dynamic environment.
• Ability to communicate technical concepts clearly and effectively with technical teams, support staff, vendors, and business stakeholders.

Preferred Qualifications

• Master's degree in computer science, information technology, cybersecurity, or a closely related field.
• Direct hands-on experience with Okta administration, configuration, and application integration is strongly preferred.
• Experience designing and supporting IAM workflows, automation, and identity lifecycle processes in a complex enterprise environment.
• Experience leading or supporting implementation of a new IAM platform, major IAM enhancement, or modernization initiative.
• Experience with access governance, role design, provisioning and deprovisioning, application onboarding, and automated access controls in a complex enterprise environment.
• Relevant industry certifications such as CISSP, CISM, or IAM-related certifications.

Salary and Benefits

$101,050 – $112,285 annual salary

Mines takes into consideration a combination of candidate's education, training and experience as well as the position's scope and complexity, the discretion and latitude required in the role, work location, and external market and internal value when determining a salary level for potential new employees.

Colorado School of Mines offers a robust portfolio of benefits for all employees. For this role, that includes:

• Flexible health and dental care options
• Generous sick/vacation time: 13 paid holidays per year – including a week-long winter break for entire campus.
• Fully vested retirement plan on first day of employment, with generous employer contribution
• Tuition benefits (6 credits per year for employees, 50 percent discount for dependents)
• Free RTD Ecopass

All Mines employees also have access to discount programs through the State of Colorado and free tickets for Mines Athletics home games, as well as access to the state of the art Recreation Center (fitness classes and training, swimming pool and more) and equipment rentals through the Outdoor Rec Center. We are proud to have recently opened an on campus daycare center. For more details about benefits at Mines, visit mines.edu/human-resources/benefits.

How to Apply

Complete an online application (personal information, demographic information, veteran status)

• Upload a resume or CV
• Upload a cover letter

Candidates must be currently authorized to work in the United States. Visa sponsorship is not available for this position.

This posting may be used to fill more than one vacancy based on business needs.

References will not be contacted until later in the selection process and you will be informed before that contact is made.

Application review will begin June 24, 2026. Please apply by June 23, 2026 at 11:59 p.m.

Successful completion of a background investigation is required for this position.

About Mines & Golden, CO

When the world looks for answers, the world looks to Mines.

Colorado School of Mines is a top-ranked public university solving the grand challenges facing our society, particularly those related to the Earth, energy and the environment. Founded in 1874 with specialties in mining and metallurgy, Mines' scope and mission have continually expanded to meet the needs of industry and society. Today, we are the No. 36 public university in the nation, recognized for our innovation and undergraduate teaching in science, technology engineering and math (U.S. News and World Report, 2025).

Mines graduates are change makers, boundary breakers and problem solvers. Since our earliest days, a Mines education has been and continues to be a transformational opportunity, with one of the strongest returns on investment out there for talented STEM students of all backgrounds.

At the same time, Mines faculty members are pushing their fields in new directions, whether that's manufacturing, space resources, quantum engineering, carbon capture or more. Mines was recently classified as a R1 "Very High Activity" research institution by Carnegie, a notable feat for any university but particularly one of our size.

That size – roughly 8,200 undergraduate and graduate students – also translates to a close-knit campus community,