Identity Access Management Analyst - #004309

Posting Number EHRA821P Quick Link for Internal Postings https://jobs.wcu.edu/postings/27041 Classification Title IT Analyst/Programmer III Working Title Identity Access Management Analyst - #004309 Department IT Chief Technologist Office Anticipated Hiring Range About WCU

Western Carolina University continues to rank high on Forbes 'Best Employers' lists each year. Including:

• 2024 - Ranking in the top 8.5% on Forbes 'America's Best Midsize Employers' list, WCU was ranked 34 out of the top 400 employers across all industries.
• 2023 - Ranked in the top 20% on Forbes 'America's Best Midsize Employers' list, WCU was ranked 97 out of the top 500 employers across all industries.
• 2022 - Ranked 14th in the top 100 employers in North Carolina in Forbes 'America's Best Employers by State' list.

Western Carolina University is the UNC system's westernmost campus and has been consistently ranked as one of the top 15 public regional institutions in the South.

Employees of WCU are provided a comprehensive benefits package as well as other resources, policies and programs to ensure a happy and healthy work/life balance. Benefit eligible employees have access to dental, vision and health insurance plans - eligibility begins on the first of the month following date of hire. Retirement plan contributions begin on the eligibility date following election and include employer contributions for either a defined contribution or a defined benefit plan. Optional disability plans are also available.

Eligible employees have access to tuition waivers for up to three courses per academic year; employee may enroll at any of the constituent UNC System campuses. Also offered are free group exercise classes multiple times per week, a discounted membership to the campus recreation center, free vaccine and booster shots offered on campus, pretax flexible spending accounts, 12 paid holidays and 24 hours of paid community service leave each year. Paid vacation and sick leave accrual begin after first month of employment. Paid parental leave after 12 months of continuous service.

WCU offers an abundance of training and development programs, certifications, workshops and conferences - many of which are offered free of charge.

Position Summary

The primary location of this position is the main Cullowhee, NC campus.

The Identity Access Management (IAM) Analyst is responsible for how users within the university are given an identity - and how it is protected, including saving critical applications, data and systems from unauthorized access while managing the identities, authentication services, and access rights of people both inside and outside the university. It is the responsibility of the IAM analyst to work with functional areas to understand business requirements and manage identity, access, authentication, and authorization within Microsoft Entra ID and Active Directory to meet those needs.

Core Job Duties:

1.Analysis, design, requirements, documentation, and implementation of automated lifecycle processes for accounts, and applications. Design and develop electronic workflows for business roles, access requests and approvals for resources, applications, groups, and sites. Design and develop Analytics, Insight Metrics, and Security and Audit Reports. Assist with strategic roadmaps, university level plans, or enterprise architecture diagrams.

The position is regularly involved in project management and may be asked to lead projects as assigned by the department director. These projects have varying levels of complexity and may impact the division or the university. The position may serve on wider project teams or committees and provide expert knowledge and represent IT Division to external stakeholders.

2.Work with IT vendor management, IT security, and campus departments to determine application requirements in the acquisition phase and register and setup enterprise applications purchased by the university. Enterprise applications registration includes single sign-on (SSO), authentication strengths, conditional access, and application access.

3.Client support for One Identity Manager and Entra ID services for identities, authentication, conditional access, and application authorization. Assist with One Identity Manager testing and upgrades. Respond to requests from Data Stewards, campus audit and advisory services, State and Federal auditors' security review.

4.Provide second level technical support to the project team, end users, and functional groups through ticket management and participate in project meetings.

Minimum Qualifications

Must be eligible to work in the United States without sponsorship.

Bachelor's degree in Computer Science, Computer Engineering, or related technical degree from an appropriately accredited institution and two years of experience in application development; or a Bachelor's degree with some computer coursework from an appropriately accredited institution and three years of experience in application development; or an Associate's degree in computer programming and three years of experience in application development.

• 1-2 years of experience with scripting languages (PowerShell), modern programming languages (C#, Python, JavaScript), and frameworks and API's (Microsoft Graph API/Angular/.NET).
• 1-2 years of experience with database design and data query languages (SQL, T-SQL, PL/SQL).

Preferred Qualifications

• Knowledge of or experience with software architecture and design, and software development lifecycle in a software development environment. Preference for Microsoft development tools and development environment.

• Demonstrated ability to meet with clients to gather and document requirements.

• Knowledge and understanding of identities, accounts, directory services, and application security. Microsoft Active Directory and Microsoft Entra ID preferred.

• Knowledge and/or experience in business roles, entitlement management, application roles, and Role-based Access Control (RBAC).

• Knowledge and understanding of Identity Governance solutions (preference for Microsoft Identity Governance, Quest One Identity Manager).

• Excellent communication (Oral and written), interpersonal, organizational and time management skills.

• Strong ability to present and explain complex technical topics, problems, alternative solutions to others.

• Knowledge of or experience working with and supporting large applications like an IGA solution or ERP system.

• Firm knowledge of or experienced in analytical and troubleshooting skills with complex technical subjects and tasks.

• Knowledge of or experience with state and federal regulations around identity management.

• Ability to determine when to file a case and/or to escalate an existing case with the vendor's technical support center.

Position Type Permanent Full-Time Number of Hours Per Week 40 Number of Months Per Year 12

Posting Text

Open Date 04/02/2024 Close Date Open Until Filled Yes Special Instructions to Applicants

Must be eligible to work in the United States without sponsorship.

Hard copy application materials will not be considered. Attach: 1) A Letter of interest indicating your qualifications and professional interests; 2) a professional resume; 3) a list of at least three professional references (include names, addresses, and phone numbers).

For questions or additional information, please contact Stan Hammer (shammer@wcu.edu)

Background/E-Verify

Final candidates are subject to criminal & sex offender background checks. Some vacancies also require credit or motor vehicle checks.

Western Carolina University uses E-Verify to confirm employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify. Proper documentation of identity and employability are required at the time of employment.

Credential Verification

All new employees are required to have listed credentials/degrees verified within 30 days of employment. All new employees who will be teaching are required to provide official transcripts within 30 days of employment. Transcripts should be provided for the highest earned degree and/or the degree which is being used to satisfy credential/qualification requirements.

AA/EOE

Western Carolina University is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race; color; religion; sex; sexual orientation; gender identity or expression; national origin; age; disability; genetic information; political affiliation; National Guard or veteran status, consistent with applicable federal, state and local laws, regulations, and policies, and the policies of The University of North Carolina. Additionally, the University promotes the realization of equal employment opportunity for minorities, women, persons with disabilities, and veterans through its affirmative action program.

Persons with disabilities requiring accommodations in the application and interview process please call (828) 227-7218 or email at jobs@email.wcu.edu.

University Safety

The Western Carolina University Annual Safety Report is available online at University Annual Safety Report or in hard-copy by request at the office of the Vice Chancellor for Student Affairs, 227 HFR Administration Building, Cullowhee, NC 28723 (828-227-7147) or the Office of University Police, 111 Camp Annex, Cullowhee, NC 28723 (828-227-7301). The report, required of all universities participating in Title IV student financial aid programs, discusses crime statistics, procedures for reporting suspicious or criminal activity, security, police authority, crime prevention strategies, university policies on substance abuse and sexual offenses, workplace violence and fire safety.