IDAM Engineer in Manchester

About IT Services

IT Services at the University of Manchester is a vibrant and fast-moving department, focusing on delivering excellent customer service and quality services for our staff, students, and researchers.

The Team

This is an exciting opportunity to work within one of the UK’s largest universities and help deliver the University of Manchester’s vision to become a world-leading university. Supporting the delivery of this vision via the authentication, directory, and identity management services managed and developed by the Identity and Access Management team (IDAM). You will be working in a core IT team to provide directory, identity, and access management services to over 50,000 students and staff. The team supports and manages authentication and identity utilising a range of technologies, ensuring secure, seamless access to university systems, supporting the entire identity lifecycle from onboarding to offboarding.

The Role

You will, as part of the team, support all aspects of the identity lifecycle, including onboarding and offboarding of staff and students, as well as managing and maintaining the underlying directories and authentication protocols to provision and assure appropriate and relevant access throughout a user’s journey. This may include setup and maintenance of Groups, fault finding through the systems, access review activity, getting involved in the development and design of new or existing solutions, working closely with project teams as well as staff and students to support IDAM queries. The role will be working within a multidiscipline team and there is an opportunity to work and gain experience across the IDAM capabilities. You will work closely with and be supported by Senior engineers as well as our IDAM Administrators to manage and support resolution of incidents and requests. The role has a particular focus on our new technologies currently in development and as such experience with SailPoint, or equivalent IAM products is highly desirable. Wider knowledge of IAM technologies will also be advantageous including NetIQ OpenText.

The Person

Are you passionate about Identity and Access Management? Do you have demonstrable experience in an IDAM-oriented role? Can you bring your expertise and skills to a Higher Education environment which is complex and evolving? We are looking for a highly motivated IDAM Engineer to be a part of our highly skilled and ambitious IDAM team. You should possess in-depth knowledge, hands-on experience in the technologies we support, and an excellent understanding of IDAM principles and policies. You will also need to be able to work closely with colleagues in other areas including the Support Centre, Infrastructure, and Networks, as well as our Security and Architecture teams; therefore, good collaboration and communication skills are essential.

The successful candidate should be able to demonstrate:

• Essential role requirements:
• Demonstrable experience working in an IDAM engineering role or equivalent Security related discipline.
• Excellent understanding of and experience delivering IDAM concepts (e.g. access control, SSO, federation, MFA, identity lifecycle management, Privileged access management, RBAC, Access reviews, separation of duties etc.); and how these concepts work together to create a secure IDAM environment.
• Hands-on experience of IDAM protocols and frameworks such as SAML, OAuth, LDAP, Shibboleth, Active Directory or similar directory services (SailPoint is a plus!).
• Be able to evidence good collaborative working within IT and beyond, demonstrating good communication skills (working as part of a project or incident team for example).

• Desirable:
• Knowledge of and experience of working with SailPoint technologies.
• Knowledge of and experience of working with NetIQ/OpenText technologies.
• Experience working with a large enterprise distributed computing HE environment.
• Experience working with Project teams in an Agile or Waterfall environment.
• Ability to learn new technologies to help support some of our existing and developing services.
• Experience of or understanding of IGA solutions.
• Familiarity and experience with one or more leading IGA technologies (Okta, SailPoint, OpenText, One Identity etc).
• Linux experience.
• Understanding of Linux operating systems and relevant technologies.
• Knowledge of network security technologies.
• Experience of/good understanding of MSSQL.

• Desirable qualifications:
• ITIL, CIMP, CIAM, CIST, CAMS, CDP.

What can you expect in return

Our diverse job opportunities all include a top benefits package that includes many features that are hard to find in the private sector:

• Generous annual leave allowance, including Christmas/New Year closure;
• Pension scheme membership to provide benefits for you and your family;
• Well-being programme with counselling, fitness and leading sports facilities;
• Learning and development opportunities;
• Season ticket loans for public transport;
• Cycle to Work Scheme;
• Workplace nursery scheme;
• Staff recognition schemes;
• Staff discounts on a range of products and services including travel and high street savings.

In fact, there are so many benefits available you can see more of them by clicking here.

Find out more about our organisation and values: IT Services: About us and ITS Practice Charter.

When completing the additional information section of your application, please ensure you make reference to the job description and person specification above, as this will form an integral part of the shortlisting process.

Interviews are expected to be held on the week commencing 9th and 16th of February.

As an equal opportunities employer, we welcome applicants from all sections of the community regardless of age, sex, gender (or gender identity), ethnicity, disability, sexual orientation, and transgender status. All appointments are made on merit. Our University is positive about flexible working; you can find out more here. Hybrid working arrangements may be considered.

Please be aware that due to the number of applications we unfortunately may not be able to provide individual feedback on your application.

Please note that we are unable to respond to enquiries, accept CVs or applications from Recruitment Agencies. Any recruitment enquiries from recruitment agencies should be directed to . Any CVs submitted by a recruitment agency will be considered a gift.

Enquiries about the vacancy, shortlisting and interviews: Please contact our IT Resource Management Team Email: General enquiries: Email: Technical support: This vacancy will close for applications at midnight on the closing date.

Please see the link below for the Further Particulars document which contains the person specification criteria.