{"id":1128641,"url":"https://alion.io/job/cornell-university-identity-management-developer-cemi","title":"Identity Management Developer (CEMI)","company":{"id":13209,"name":"Cornell University","domain":"cornell.edu","url":"https://alion.io/company/cornell","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":21,"ghost_share":0,"stale_share":0.524,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-11-15T07:52:55Z"}},"role":"Backend","role_family":"Backend","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ithaca, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":88386,"max":102719,"currency":"USD","period":"year","gross":null,"usd_annual":102719},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Active Directory","optional":false},{"name":"Git","optional":false},{"name":"Java","optional":false},{"name":"LDAP","optional":false},{"name":"Perl","optional":false},{"name":"PHP","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Ruby on Rails","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C#","optional":true},{"name":"CI/CD","optional":true},{"name":"Dropbox","optional":true},{"name":"IAM","optional":true},{"name":"Least Privilege","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-22T23:33:41Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-11-15T03:51:12Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Identity Management Developer (CEMI) [Remote] [2 Year Term]\nNo Visa Sponsorship is available for this position.\nThis is a two (2) year term appointment which may be ended or extended based on organizational needs, funding availability, and performance.\nThis position is eligible for remote work within the United States. However, while the position is remote, periodic travel to Cornell University's Ithaca, New York campus will be required for meetings, team collaboration, training, and other departmental or university business needs. The university reserves the right to modify, suspend, or terminate the remote work arrangement at any time.\nAbout Information Technology @ Cornell\nInformation Technology (IT) is a strategic enabler for many functions at Cornell University, with staff located across colleges, administrative units, and campuses throughout the institution. While comprised of many organizations, IT operates as one partnering closely with faculty, staff, and students to support teaching, research, and business operations. By being embedded where the Cornell community is, IT is well positioned to provide support ranging from day-to-day needs to large, complex initiatives that advance major academic, research, and operational objectives across the university. Check out this link to find out more about IT@Cornell.\nWhat will you do:\nReporting to the Assistant Director for Identity & Access Management, the Identity Management Developer (CEMI) provides cybersecurity-focused technical leadership and engineering expertise in support of Cornell University’s Identity & Access Management services within the university IT Security Office (ITSO). This position plays a key role in ensuring the secure, reliable, and effective delivery of enterprise authentication, authorization, and directory services that underpin the university’s academic, research, and administrative operations.\nThe Identity Management environment at Cornell consists of a diverse ecosystem of homegrown, open-source, and vendor-provided applications and services. The Identity Manager Developer operates primarily in an engineering-focused capacity, contributing deep technical expertise to the design, planning, implementation, and ongoing improvement of identity services. This role is instrumental in maintaining a strong security posture while enabling scalability, resiliency, and ease of use for a broad and varied campus community.\nIn addition to technical leadership, this position serves as a key liaison between ITSO, campus business units, and external partners. The Identity Management Developer supports strong service relationships by helping stakeholders understand identity service capabilities, status, and access processes, and by translating complex technical concepts into clear, non-technical guidance when needed. The role also contributes to the evolution of next-generation Identity Management solutions by collaborating with vendors, peer institutions, and internal partners to stay current with emerging technologies and best practices in higher education cybersecurity.\nThe Identity Management Developer is expected to work collaboratively within the Identity Management team and across ITSO to meet service levels, support operational objectives, and respond effectively to system outages or changes, including availability outside of standard university business hours when required.\nThis is a two (2) year term appointment which may be ended or extended based on organizational needs, funding availability, and performance.\nThis position is eligible for remote work within the United States. However, while the position is remote, periodic travel to Cornell University's Ithaca, New York campus will be required for meetings, team collaboration, training, and other departmental or university business needs. The university reserves the right to modify, suspend, or terminate the remote work arrangement at any time.\nWhile position responsibilities vary, every member of our community is expected to foster a culture of belonging and a healthy work environment by communicating across differences; being cooperative, collaborative, open, and welcoming; showing respect, compassion, and empathy; engaging and supporting others regardless of background or perspective; speaking up when others are being excluded or treated inappropriately; and supporting work/life integration of oneself and others.\nRequired Qualifications:\nBachelor’s degree with a minimum of three to five years of relevant experience, or an equivalent combination of education and experience.\nDemonstrated success providing technical support and application or middleware development in a distributed, team-focused computing environment.\nDemonstrated expertise with one or more scripting or programming languages, such as Java, Perl, Python, and/or VB (.NET), ReactJS, Ruby, and/or PHP\nApproximately 1 year+ of professional experience developing ReactJS applications and/or Ruby on Rails.\nSystem administration experience with Linux required; and Windows experience preferred.\nWorking to advanced knowledge of one or more identity and access management technologies, including directory services, virtual directories, SAML2, OAuth2, LDAP, and Active Directory authorization technologies.\nProven experience writing technical design documentation, conducting code reviews, and working with version control systems such as Git.\nAbility to translate user and business needs into clear functional requirements and technical specifications, and to promote effective and efficient information sharing.\nDemonstrated ability to communicate complex Identity Management concepts-including system functions, capabilities, and processes-into business terms that are clear, accessible, and meaningful to non-technical stakeholders.\nProven ability to work effectively in a dynamic, deadline-driven, and complex environment with multiple competing priorities.\nStrong facilitation, problem-solving, analytical, reasoning, and judgment skills, with the ability to evaluate options and recommend sound technical solutions.\nExperience supporting and managing mission-critical systems in a production environment, including troubleshooting and incident response.\nProven ability to identify, scope, and implement opportunities for automation or architectural improvements that enhance system reliability, security, or efficiency.\nAbility to cultivate and develop inclusive working relationships with students, faculty, staff, and community members. \nPreferred Qualifications:\nExperience working in higher education, research, or similarly complex enterprise environments, particularly those with diverse identity populations and federated access needs.\nFamiliarity with cloud-based identity platforms and services (e.g., Azure AD, AWS IAM, Google Identity, or similar).\nExperience with identity lifecycle management, provisioning/de-provisioning workflows, and access governance.\nKnowledge of zero trust, least-privilege, and modern identity security architectures.\nExperience integrating identity services with enterprise applications, including SaaS platforms and custom applications.\nDemonstrated experience participating in cross-functional technical initiatives, including collaboration with security, infrastructure, and application teams.\nExperience supporting incident response, audits, or compliance efforts related to identity and access management.\nFamiliarity withDevOps or CI/CD practices, automated deployments, and infrastructure-as-code concepts.\nStrong customer-service orientation with the ability to balance security requirements with usability and operational needs.\nApplication Information:\nA resume is required for further consideration for this position. A cover letter expressing alignment with Cornell’s mission and this role is strongly encouraged. When applying through our system, please remember to attach your application materials (Cover Letter and Resume) in PDF format. \nNo Visa Sponsorship of any kind is available for this position. \nNo Relocation assistance will be provided for this position. \nRewards and Benefits\nThis position is based in Ithaca, New York, however, the successful applicant may perform this role remotely anywhere within the United States. Employees who work remotely may receive multiple W-2 Forms depending on their work location. The New York Convenience of employer guidelines require New York State individual tax reporting and withholding for this position. Additional individual state income tax filings may also be required if working temporarily outside of New York State. The university reserves the right to modify, suspend, or terminate the remote or hybrid work arrangement at any time. \nCornell receives national recognition as an award-winning workplace for our health, wellbeing, and sustainability. Our benefits programs include comprehensive health care options, generous retirement contributions, access to wellness programs, and employee discounts with local and national retail brands. We invite you to follow this link to get more information about our benefits: Understand Your Benefits | Working at Cornell.\nOur leave provisions include health and personal leave, three weeks of vacation and 13 holidays: Martin Luther King, Jr. Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Thanksgiving and the day after, and an end of the year winter break from December 25-January 1. To offer greater flexibility for observing faiths and traditions we also offer two additional floating holidays. Learn more about our generous leave provisions: Holiday and Accrued Time Off | Working at Cornell\nCornell's impressive educational benefits include tuition-free Extramural Study and Employee Degree Program, tuition aid for external education, and Cornell Children's Tuition Assistance Program. Learn more about our extensive educational benefits: Education Benefits | Working at Cornell\nFollow this link to learn more about the Total Rewards of Working at Cornell: Total Rewards | Working at Cornell.\nUniversity Job Title:\nIT Security Engineer IIIJob Family:\nInformation TechnologyLevel:\nFPay Rate Type:\nSalaryPay Range:\n$88,386.00 - $102,719.00Remote Option Availability:\nRemoteCompany:\nEndowedContact Name:\nMaria AvilaContact Email:\n Titles and Pay Ranges:\nNon-Union Positions\nNoted pay ranges reflect the potential pay opportunity for each job profile. The hiring rate of pay for the successful candidate will be determined considering the following criteria:\nPrior relevant work or industry experience\n\nEducation level to the extent education is relevant to the position\n\nUnique applicable skills\n\nAcademic Discipline\n\nTo learn more about Cornell’s non-union staff job titles and pay ranges, see Career Navigator.\nUnion Positions\nThe hiring rate of pay for the successful candidate will be determined in accordance with the rates in the respective collective bargaining agreement. To learn more about Cornell’s union wages, see Union Pay Rates.\nCurrent Employees:\nIf you currently work at Cornell University, please exit this website and log in to Workday using your Net ID and password. Select the Career icon on your Home dashboard to view jobs at Cornell.\nOnline Submission Guidelines:\nMost positions at Cornell will require you to apply online and submit both a resume/CV and cover letter. You can upload documents either by “dragging and dropping” them into the dropbox or by using the “upload” icon on the application page. For more detailed instructions on how to apply to a job at Cornell, visit How We Hire on the HR website.\nEmployment Assistance:\nFor general questions about the position or the application process, please contact the Recruiter listed in the job posting or email .\nIf you require an accommodation for a disability in order to complete an employment application or to participate in the recruiting process, you are encouraged to contact Cornell Office of Civil Rights at voice (60...","description_format":"text","description_chars":14288,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Relocation assistance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Identity Management","Higher Education"],"lifecycle":[{"event":"open","at":"2026-09-22T23:33:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":3,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 135 · green card filings: 2","filings_12m":135,"filings_prev_12m":183,"green_card_filings_12m":2,"median_offered_wage_usd":87208,"route":null,"cap_exempt":true,"checked_at":"2026-11-15T09:21:55+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)","Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.488,"p_room":0.28,"age_days":53,"expected_fill_days":26,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-15T07:52:55Z"},"pay":{"stated_usd_annual":102719,"is_top_pay":false},"html_url":"https://alion.io/job/cornell-university-identity-management-developer-cemi","json_url":"https://alion.io/job/cornell-university-identity-management-developer-cemi.json","meta":{"generated_at":"2026-11-15T21:56:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17446,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13209},"rest":"https://alion.io/mcp/rest/get_company?id=13209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcornell-university-identity-management-developer-cemi"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcornell-university-identity-management-developer-cemi"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcornell-university-identity-management-developer-cemi"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cornell-university-identity-management-developer-cemi\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcornell-university-identity-management-developer-cemi"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1128641}},{"tool":"search_jobs","arguments":{"company":"cornell.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1128641},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}