Identity Access Management Analyst -

at  Western Carolina University

The primary location of this position is the main Cullowhee, NC campus.
The Identity Access Management (IAM) Analyst is responsible for how users within the university are given an identity – and how it is protected, including saving critical applications, data and systems from unauthorized access while managing the identities, authentication services, and access rights of people both inside and outside the university. It is the responsibility of the IAM analyst to work with functional areas to understand business requirements and manage identity, access, authentication, and authorization within Microsoft Entra ID and Active Directory to meet those needs.
Core Job Duties:
1. Analysis, design, requirements, documentation, and implementation of automated lifecycle processes for accounts, and applications. Design and develop electronic workflows for business roles, access requests and approvals for resources, applications, groups, and sites. Design and develop Analytics, Insight Metrics, and Security and Audit Reports. Assist with strategic roadmaps, university level plans, or enterprise architecture diagrams.
The position is regularly involved in project management and may be asked to lead projects as assigned by the department director. These projects have varying levels of complexity and may impact the division or the university. The position may serve on wider project teams or committees and provide expert knowledge and represent IT Division to external stakeholders.
2. Work with IT vendor management, IT security, and campus departments to determine application requirements in the acquisition phase and register and setup enterprise applications purchased by the university. Enterprise applications registration includes single sign-on (SSO), authentication strengths, conditional access, and application access.
3. Client support for One Identity Manager and Entra ID services for identities, authentication, conditional access, and application authorization. Assist with One Identity Manager testing and upgrades. Respond to requests from Data Stewards, campus audit and advisory services, State and Federal auditors’ security review.
4. Provide second level technical support to the project team, end users, and functional groups through ticket management and participate in project meetings.

MINIMUM QUALIFICATIONS

Must be eligible to work in the United States without sponsorship.

Bachelor’s degree in Computer Science, Computer Engineering, or related technical degree from an appropriately accredited institution and two years of experience in application development; or a Bachelor’s degree with some computer coursework from an appropriately accredited institution and three years of experience in application development; or an Associate’s degree in computer programming and three years of experience in application development.

• 1-2 years of experience with scripting languages (PowerShell), modern programming languages (C#, Python, JavaScript), and frameworks and API’s (Microsoft Graph API/Angular/.NET).
• 1-2 years of experience with database design and data query languages (SQL, T-SQL, PL/SQL).

PREFERRED QUALIFICATIONS

• Knowledge of or experience with software architecture and design, and software development lifecycle in a software development environment. Preference for Microsoft development tools and development environment.
• Demonstrated ability to meet with clients to gather and document requirements.
• Knowledge and understanding of identities, accounts, directory services, and application security. Microsoft Active Directory and Microsoft Entra ID preferred.
• Knowledge and/or experience in business roles, entitlement management, application roles, and Role-based Access Control (RBAC).
• Knowledge and understanding of Identity Governance solutions (preference for Microsoft Identity Governance, Quest One Identity Manager).
• Excellent communication (Oral and written), interpersonal, organizational and time management skills.
• Strong ability to present and explain complex technical topics, problems, alternative solutions to others.
• Knowledge of or experience working with and supporting large applications like an IGA solution or ERP system.
• Firm knowledge of or experienced in analytical and troubleshooting skills with complex technical subjects and tasks.
• Knowledge of or experience with state and federal regulations around identity management.
• Ability to determine when to file a case and/or to escalate an existing case with the vendor’s technical support center.

Please refer the Job description for details