{"id":3748776,"url":"https://alion.io/job/davidson-college-identity-access-management-engineer","title":"Identity & Access Management Engineer","company":{"id":1784087,"name":"Davidson College","domain":"davidson.edu","url":"https://alion.io/company/davidson-edu","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":95,"open_postings":20,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":72,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Davidson, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-11-03T17:11:39Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T01:17:08Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":5},"description":"Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.\nThe role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.\nSpecifically... Identity and Access Management Engineering (45%)\nAdminister and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.\nOwn identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.\nAdminister RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.\nAdminister Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.\nMaintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.\nResolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.\nDesign and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).\nDirectory and Authentication Services (25%)\nAdminister the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.\nManage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.\nMaintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.\nGovernance, Consultation, and Documentation (10%)\nServe as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.\nConsult with campus offices on access needs and data-owner responsibilities.\nMaintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.\nSystems Administration (20%)\nMaintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.\nSupport backup and recovery for identity systems, including restoration testing.\nParticipate in documented change management (CAB) and share in the Infrastructure on-call rotation.\nAutomate operational tasks with scripting and AI-assisted development techniques.\nGeneral server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.\nRequirements\nBachelor's degree or equivalent combination of education and relevant experience.\n5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.\nStrong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.\nPractical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.\nScripting proficiency (PowerShell, Python, or similar) for identity automation.\nSecurity-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.\nClear communication with technical and non-technical audiences; strong documentation habits.\nPreferences\nExperience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.\nExperience with InCommon, certificate management, or PKI, including automating certificate renewal.\nExperience supporting identity for AI and agentic platforms, API access management, or service-account governance.\nHigher education experience, including FERPA and GLBA aware access design.\nRelevant certifications (for example, Microsoft Identity and Access Administrator).\nFamiliarity with identity threat detection and response tooling.\nInformation about how to submit an application can be found at https://employment.davidson.edu.","description_format":"text","description_chars":6082,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Education","Health Care","Professional Services"],"lifecycle":[{"event":"open","at":"2026-11-04T14:29:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":52500,"route":null,"cap_exempt":true,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":72,"reasons":["conf:4","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/davidson-college-identity-access-management-engineer","json_url":"https://alion.io/job/davidson-college-identity-access-management-engineer.json","meta":{"generated_at":"2026-11-09T07:43:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5298,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1784087},"rest":"https://alion.io/mcp/rest/get_company?id=1784087"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdavidson-college-identity-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdavidson-college-identity-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdavidson-college-identity-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/davidson-college-identity-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdavidson-college-identity-access-management-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3748776}},{"tool":"search_jobs","arguments":{"company":"davidson.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3748776},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}