Working/Functional Title Identity & Access Management, Manager Position Summary Reporting to the Assistant Director of Application Platforms in MSU IT Enterprise Services. The IAM Manager leads a technical team of staff members, including IAM Architects, IAM Engineers, and IAM Developers. The MSU IT Identity and Access Management (IAM) team is responsible for designing, implementing, and maintaining the university's enterprise identity ecosystem. This includes managing authentication systems, identity lifecycle management, and access control solutions that serve MSU's entire community of students, faculty, staff, and affiliated users. In this position, you will work closely with teams across Michigan State University to design and support identity management platforms. The team partners with other departments in MSU IT and across campus to deliver a unique enterprise identity platform. As the IAM Manager, you will collaborate with system owners to implement a unified login experience that leverages SaaS solutions to improve user experience and security. In this role, you will: + Lead the implementation and promotion of industry standards in identity management platforms and integrations. + Manage technology lifecycles by communicating and coordinating with impacted users regarding monitoring, security, and upgrades. + Collaborate with campus IAM stakeholders, partners, and vendors to implement best practices and ensure that user provisioning and de-provisioning is done securely. Michigan State University (MSU) is ranked #30 among public universities and #63 overall in U.S. News & World Report’s America’s Best Colleges 2025. Located in East Lansing, three miles east of the state’s capitol, the MSU community includes more than 12,000 faculty, academic and support staff, as well as over 51,000 students. MSU offers an extensive benefits package to its employees including health care, prescription, and dental coverage, and a base retirement program with a University matching contribution, as well as basic life insurance. In addition, MSU offers educational benefits including a course fee courtesy program and educational assistance. MSU Information Technology provides the primary leadership for strategic, financial, and policy initiatives affecting information technology (IT) across MSU. MSU IT offers technology resources that support MSU’s mission of providing education, conducting research, and advancing engagement. Minimum Requirements Bachelor's degree or related information technology field with coursework in identity and access management; eight or more years of related and progressively more responsible work experience in enterprise identity management systems; experience with enterprise-level IAM platforms such as Okta, Azure AD, or SailPoint; experience working with authentication protocols (SAML, OAuth, OIDC) and directory services (Active Directory, LDAP); or an equivalent combination of education and experience. Desired Qualifications + Experience implementing single sign-on (SSO) integrations and managing cloud identity solutions + Supervisory experience + Experience with identity lifecycle management, including automated provisioning/de-provisioning and role-based access control (RBAC) + In-depth knowledge of identity security best practices, compliance requirements (SOX, HIPAA, FERPA), and multi-factor authentication (MFA) implementation + Experience leading technical teams and managing vendor relationships + Experience with identity-related scripting and automation (PowerShell, Python, or similar) + Relevant certifications such as CISSP, CIAM, or similar identity/security credentials Equal Employment Opportunity Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, citizenship, age, disability or protected veteran status. Required Application Materials Cover Letter Resume Special Instructions Please provide three professional references who are knowledgeable of your work Work Hours STANDARD 8-5 Website https://tech.msu.edu Remote Work Statement MSU strives to provide a flexible work environment and this position has been designated as remote-friendly. Remote-friendly means some or all of the duties can be performed remotely as mutually agreed upon. Bidding eligibility ends February 25, 2025 at 11:55 P.M.