Identity Systems Engineer III

About this role

University Operations: University Operations at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.   The Opportunity: The Identity Systems Engineer III plays a critical role in advancing UCF's identity and access management and cybersecurity capabilities. This position leads the engineering and continuous improvement of AI-enabled identity lifecycle management services, leveraging automation and intelligent technologies to strengthen access governance, improve operational efficiency, and reduce institutional risk. The role designs, implements, and supports UCF's hybrid identity ecosystem, including cloud and on-premises directories, authentication, authorization, single sign-on, multi-factor authentication, and related identity technologies that provide access to university resources.

Working across a diverse portfolio of enterprise applications, platforms, and teams, the position engineers security controls and integrations that protect sensitive data, support regulatory compliance, and enable the adoption of emerging technologies. Through innovation, collaboration, and technical expertise, this position contributes directly to the resilience, security, and modernization of the university's digital environment.

Classification Title: Systems Engineer III

Responsibilities:

Enterprise Identity Platform Engineering and Operations • Support designing, configuring and administrating cloud-based identity systems and integrations including those from Microsoft Entra ID, Amazon Web Services, and Google Cloud Platform. Implement and maintain appropriate access policies, modern authentication methods, risk reducing identity protection controls and associated cloud identity services. Implement security best practices to support the institution’s overall security posture and reliable operation of enterprise authentication and authorization services.

• Support the integration of institutional applications and systems with IAM platforms using SAML, OAuth, OIDC, SCIM, and related technologies. Work with campus partners and vendors to ensure secure, standards based interoperability and timely resolution of access related requests.

• Maintain IAM related on-premise infrastructure, including on premises and cloud data center servers, ensuring systems are patched, updated, and aligned with institutional security standards. Support directory synchronization services, connectors, agents, and other IAM platform components to ensure operational stability.

• Create and maintain technical documentation, standard operating procedures, and knowledge resources. Provide tier three technical guidance and support to campus stakeholders, collaborates with IT and information security teams, and contributes to planning and continuous improvement of IAM services. Other duties as assigned.

Artificial Intelligence Identity Lifecycle Management • Develop and maintain automation scripts, workflows, and tools including AI to improve the efficiency, accuracy, and reliability of IAM operations. Identify opportunities to streamline processes, reduce manual effort, and enhance service delivery in alignment with best practices and security baselines.

• Perform identity life cycle management activities, including the creation, modification, provisioning, de-provisioning, and reconciliation of accounts and AI agents across institutional systems. Ensure identities are provisioned accurately, consistently, and in compliance with university policies, standards, and regulatory requirements.

Identity Security and Risk Reduction • Using industry leading tools such as CrowdStrike, monitor identity related security events, analyze authentication anomalies, and support security operations and incident response activities. Where possible, automate or use AI for remediation and implement preventive controls to reduce the risk of account compromise and unauthorized access.

• Support access governance functions by maintaining role based access models, entitlement structures, and authorization controls. Collaborate with the Application Role Security team to support access reviews, audit activities, and compliance with internal controls and external regulatory requirements.

Minimum Qualifications: Bachelor’s degree and 4 years of relevant experience; or High School Diploma (or equivalent) and 8 years of relevant work experience in lieu of degree or   an equivalent combination of education and experience   pursuant to   Fla. Stat. 112.219(6) .

Preferred Qualifications: • Experience engineering administering and supporting cloud-based Identity and Access Management (IAM) platforms, including Microsoft Entra ID (Azure AD), Amazon Web Services (AWS), Google Cloud Platform (GCP), or similar enterprise identity solutions.

• Experience implementing, securing, and supporting identity federation and provisioning technologies such as SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Active Directory integrations.

• Experience monitoring, responding, and automating the response to identity-related security events using detection and response or security operations tools.

• Experience developing automation solutions and management such as the life cycle workflows of AI agents, scripts, or workflows.

• Experience supporting access governance, regulatory compliance, and identity lifecycle management in a large organization, preferably within higher education or a public-sector institution.

Special Instructions to the Applicants: Position requires a valid Class E driver’s license. This position may involve driving to various locations on and off campus to conduct University business.

The anticipated salary range for this position is $75,809 -

Similar jobs

• IT Systems Engineer II — Sierra Space · Louisville, CO
• IT Systems Engineer III/IV — Zone5technologies · Fort Worth, Texas
• IT Systems Engineer III/IV — Zone5technologies · San Luis Obispo, California, United States
• IT Systems Engineer — Pathrobotics · Columbus, Ohio
• IT Systems Engineer — Ardentmc · Washington, D.C. Metro
• IT Systems Engineer — Scaleai · Washington, DC
• IT Systems Engineer — Langchain · San Francisco, CA
• IT Systems Engineer — Graymatter Robotics · Los Angeles - HQ