Identity & Access Analyst II.

Job Summary

The Identity Access Management (IAM) Specialist II supports the design, implementation, and maintenance of identity, access, and authentication systems across enterprise environments. This role administers identity lifecycle processes, directory services, access governance, and security frameworks, contributing to the institution’s compliance and operational efficiency. The ideal candidate demonstrates proficient expertise in IAM technologies, automation, and risk mitigation, ensuring secure, scalable, and efficient identity management. Essential Duties and Responsibilities

• Administer and automate identity lifecycle processes, including user provisioning, deprovisioning, and role-based access controls across directory services.
• Serves as the primary escalation point for troubleshooting and root cause analysis of IAM-related service-impacting issues.
• Work with cross-functional teams to integrate applications and services with enterprise authentication platforms and federation services.
• Create and maintain standard operating procedures, technical documentation, and knowledge base articles for applications and IAM workflows.
• Support the enforcement of security policies, access controls, and governance frameworks to protect institutional data and systems.
• Execute maintenance and operation (M&O) projects and participate in larger identity management initiatives that enhance identity and access management capabilities.
• Stay informed on IAM technologies, best practices, and compliance requirements.
• Performs other duties as assigned.

Minimum Qualifications

• Associate’s degree in Computer Science, Information Systems or a related field,
• Three (3) years of experience in Identity and Access Management (IAM).
• Associate level certification, such as Microsoft SC300 or similar.
• Intermediate level coding or five (5) of an equivalent mix of education and relevant experience in similar role.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Systems or a related field.
• Five (5) years of experience in Identity and Access Management in higher education environments, serving academic research and administrative functions of a large public university.
• Advanced level coding.
• Three (3) years of hands-on experience maintaining Active Directory Domain Services, Azure EntraID, or E-Directory.
• Experience in enterprise directory services (e.g., Active Directory, eDirectory), one (1) or more cloud-based IAM solutions (e.g., Entra ID, AWS IAM), one or more authentication methods (e.g., MFA, SSO) and protocols (e.g., Kerberos, LDAP, OAuth, OIDC, SAML).
• Hands-on scripting and development skills (Java, SQL, and PowerShell).
• Hands-on experience Active Directory and other directory technologies.

Knowledge, Skills and Abilities

• Knowledge of middleware and applications that integrate with databases, LDAP directories, and third-party services using vendor APIs and SDKs.
• Proficiency in role-based access control (RBAC), attribute-based access control (ABAC), access governance (IGA), and privileged access management (PAM).
• Proficient in one or more scripting languages (e.g., PowerShell, Python).
• Proficient in server administration (e.g., Windows Server, Red Hat Enterprise Linux (RHEL).
• Ability to provide excellent customer service.
• Ability to communicate effectively both orally and in written form to a variety of constituents at varying levels of authority within the organization.
• Ability to think analytically and critically to break down and resolve problems.
• Ability to read, understand, and follow policies and guidelines and apply those guidelines to daily responsibilities.

Other Requirements

• Applicants for this position must pass a Criminal Justice Information Systems (CJIS) fingerprint-based background check and maintain CJIS eligibility. Due to CJIS requirements related to system access, the following will result in being disqualified for this position: Felony Convictions, Felony Deferred Adjudication, Class A Misdemeanor, Class B Misdemeanor Convictions in the last 10 years, Class A Misdemeanor Deferred Adjudication, Class B Misdemeanor Deferred Adjudication in the last 10 years, an Open Arrest for Any Criminal Offense (Felony or Misdemeanor), and ALL Family Violence Convictions regardless of class.
• This position requires use of information which is subject to the International Traffic in Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR), Non-U.S. persons selected must meet eligibility requirements for access to export-restricted information. The ITAR/EAR defines a U.S. person as a U.S. Citizen, U.S. Permanent Resident (I.e., ‘Green Card Holder’), Political Asylee, or Refugee.

Workplace and Eligibility Conditions

• All Information Technology staff – regardless of their unique position – are expected to perform their assigned duties in a manner consistent with professional standards, with full awareness of responsibilities toward managing personal and institutional data, with priority regard to delivering customer service, with an understanding of the 24/7 nature of IT and the responsibilities that creates for them as individuals, and in a constructive and effective collaboration with colleagues.

Benefits Eligible Yes CBC Requirement It is the policy of The University of Texas at Arlington to conduct a criminal background check on any applicant who is under final consideration for employment with the University.This position may have access to critical infrastructure as defined by Section 113.001(2) of the Texas Business and Commerce Code. If so, to be hired for and continue to be employed in this position you must maintain the security or integrity of the infrastructure as set forth in Texas Executive Order GA-48. By assuming this position, and if you have access to critical infrastructure, you authorize the University to conduct routine background checks.