IAMEngineer

**Engineering a world of possibilities** The Identity Access Management (IAM) Engineer designs, implements, and supports enterprise identity services that enable secure, reliable access to university systems, data, and applications. This role engineers and administers IAM solutions across the institution, including single sign-on (SSO) integrations for applications at Mines, authentication services, directory integrations, and identity lifecycle processes. The IAM Engineer advances identity services through automation, scalable design, and continuous improvement, and partners with stakeholders across IT and the institution to deliver solutions aligned with security, compliance, and operational best practices. This position currently operates in a hybrid work model with regular campus presence required. Work arrangements are subject to change based on institutional needs. The successful candidate must be able to commute to campus in Golden, Colorado. **Primary Responsibilities** **IDENTITY SYSTEM ADMINISTRATION** * Design, implement, administer, and continuously improve enterprise IAM services and integrations that protect institutional systems, data, and applications. * Configure and maintain IAM platforms, authentication services, directory services, and related integrations, including documentation, configuration standards, and operational procedures. * Lead and support single sign-on (SSO) and multifactor authentication (MFA) integrations for applications at Mines through the university’s enterprise identity platform, Okta, in partnership with vendors and campus stakeholders. * Troubleshoot and resolve IAM-related issues, implement enhancements, and optimize services to improve reliability, performance, and user experience while minimizing technical debt. * Create and maintain technical documentation, knowledge base content, and operational guidance, and provide knowledge transfer and training to support staff, system administrators, and other IT partners. * Coll