Identity and Access Manager

Information Technology Services Job Description

Job Summary

Responsible for maintaining, managing and improving the Smith Identity and Access systems and services. Work with key stakeholders across the organization to align our Identity environment with the needs of the College; design an environment based on continuous improvement and change. As a member of the Systems and Network Services (SNS) group, create sustainable, secure and resilient systems and services to support the Identity and Access needs of the College. As the SNS operational lead in the Identity Service Team (a cross-department group), guide meaningful, transformative change in our Identity and Access service deployment. In all work, create sustainable, repeatable and scalable processes, workflows and services.

Take appropriate actions to support a diverse workforce and participate in the College's efforts to create a respectful, inclusive, and welcoming work environment.

Essential Functions

Identity and Access Architect

Envision, design and implement the full lifecycle of enterprise Identity and Access related systems, services and solutions, ensuring their quality, stability, recoverability, and security. In close consultation and partnership with the Enterprise Applications & Data group (EADS) develop and automate complex data integrations across multiple systems and architectures around account and access management. Drive root cause analysis, troubleshooting and incident analysis for identity-related data irregularities or system problems including potential security related incidents. Maintain robust and accessible documentation for a wide range of audiences; include in any design work the ability for user facing aspects to be broadly understood by key stakeholders across the College (such as HR or the Registrar’s Office).

Identity Management and Operations

As SNS operational lead, oversee the management of accounts and access life cycles with the Identity Service Team. Manage, coordinate and run projects with the Identity Service Team, drive initiatives to improve the Identity ecosystem across the College as well as within the team. Guide, participate and lead aspects of the strategic redesign of the Identity ecosystem as the needs of the College or the technology change over time. Communicate clearly and transparently with business partners with the goal of a shared understanding of the Identity ecosystem and lifecycle.

Systems Administration

Within the SNS team, participate in management of the services and systems core to Identity and Access such as LDAP, AD, SSO, GSuite (account management), password management platforms, and other systems that rely on Identity for role based access and account management. This includes a diverse set of Windows, Linux, SaaS solutions and applications both on premise and in the cloud.

Other Functions

Miscellaneous

Stay up to date with current best practices and emerging technologies by reading relevant literature and attending conferences/workshops. Participate in ITS management and team activities and protocols. Develop trust and credibility as an individual and on behalf of the ITS organization. Perform other tasks as requested by the Director of Systems and Networking.

All employees are expected to participate in the College's efforts to create a respectful, inclusive, and welcoming work environment.

Minimum Qualifications (knowledge, skills, education, experience, certifications, licenses)

A bachelor’s degree, preferably in an IT-related field, and 6 years of related IT experience including 3 years of running mission critical services related to Identity and Access Management or an equivalent combination of education/experience.

Experience working with individuals from diverse backgrounds.

Preferred Qualifications

Higher Education experience preferred.

Skills

Programmatic, structure and process oriented mindset; “we can solve that” attitude. Strong background in IDM integrations and controls. The ability to troubleshoot complex systems and processes as well as strong documentation and communication skills. The ability to coordinate work and projects with other teams and the ability to communicate in a clear, crisp, process driven way. Ability to break down strategic goals into incremental tactical milestones. Demonstrated experience driving technical change and implementations as an individual contributor with a larger team. Knowledge of one or more scripting languages and the ability to automate and programmatically interface with data. Experience with Active Directory (AD), in heterogeneous environments preferred, including permissions, group policies and LDAP schema as well as the ability to query and manipulate LDAP data. Ability to manipulate data for analysis whether it is in a database, LDAP tree or other format. Experience with GSuite and Google tools or the willingness to adopt them is a requirement.

Experience with SAML or Shibboleth SSO would be helpful as well as experience with NetIQ Identity Manager and XML. Understanding of virtual and cloud environments is a plus. Experience in IDM or IAM tools not listed here is also a plus. Experience with managing Windows or Linux servers preferred.

Additional Information

Environment:

Smith College currently leverages Microfocus NetIQ as the account provisioning tool for Active Directory and GSuite accounts. We use both AD and Shibboleth (SAML) SSO for authentication for different applications. The upstream identity provider is currently in flux as Smith is almost done migrating from Ellucian Banner to Workday for our ERP and we expect to have multiple ways identities can enter into our IDM ecosystem. We have a core Identity Services Team to manage and coordinate our work that consists of members from different parts of the IT organization. This team interacts with a larger group of stakeholders across campus who participate in the lifecycle of different Smith community members. The Identity Services Team, broadly, also uses other tools like SnapLogic for integrations with other systems that require identity information. Our Identity Management space is currently in need of a strategic realignment where we hope to build better practices, more resilient workflows and more transparent management of access and records.

Smith College views the tools we use to do our jobs as flexible and while expertise in our existing tools is critical for a successful candidate to do the job, it is our expectation that over time changes in technology and the landscape of work may cause us to reevaluate how we provide services and what tools are best suited to accomplish our goals.

All successful ITS staff are known for effectively applied expertise, thoughtful attention to detail, timely and appropriately calibrated follow-up, proactive and constructive problem-solving, openness to new approaches, and for building effective partnerships and trust within ITS, across the College and (where relevant) with external partners.

Please attach BOTH a current resume and a cover letter in order for your application to be considered for this position . You may combine your resume and cover letter into a single file or attach multiple files to your application, but BE SURE you have provided all attachments BEFORE SUBMITTING your application. You will NOT be able to attach additional files after you have hit the Submit button.

Review of applications will begin

June 14, 2021

Compensation Grade:

Grade H

Position Type:

Regular

About Smith College

Located in Northampton, MA, Smith College is one of the largest women’s colleges in the country and is dedicated to excellence in teaching and research across the liberal arts. A faculty of outstanding scholars interact with students in small classes, as advisors, and through student-faculty research projects. The College is a member of the Five College Consortium with Amherst, Hampshire and Mt. Holyoke Colleges, and the University of Massachusetts Amherst. Students cross-enroll and faculty cross-teach across the Five Colleges.

Smith College is an Affirmative Action/Equal Opportunity employer and does not discriminate on the basis of race, gender, age, color, religion, national origin, disability, sexual orientation, gender identity and expression or veteran status in the recruitment and employment of faculty and staff, and the operation of any of its programs and activities, as specified by all applicable laws and regulations. Women, minorities, veterans and individuals with disabilities are encouraged to apply.