Identity Systems Engineer III

University Operations:

University Operations at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.

The Opportunity:

The Identity Systems Engineer III plays a critical role in advancing UCF's identity and access management and cybersecurity capabilities. This position leads the engineering and continuous improvement of AI-enabled identity lifecycle management services, leveraging automation and intelligent technologies to strengthen access governance, improve operational efficiency, and reduce institutional risk. The role designs, implements, and supports UCF's hybrid identity ecosystem, including cloud and on-premises directories, authentication, authorization, single sign-on, multi-factor authentication, and related identity technologies that provide access to university resources.

Working across a diverse portfolio of enterprise applications, platforms, and teams, the position engineers security controls and integrations that protect sensitive data, support regulatory compliance, and enable the adoption of emerging technologies. Through innovation, collaboration, and technical expertise, this position contributes directly to the resilience, security, and modernization of the university's digital environment.

Classification Title: Systems Engineer III

Responsibilities:

Enterprise Identity Platform Engineering and Operations

• Support designing, configuring and administrating cloud-based identity systems and integrations including those from Microsoft Entra ID, Amazon Web Services, and Google Cloud Platform. Implement and maintain appropriate access policies, modern authentication methods, risk reducing identity protection controls and associated cloud identity services. Implement security best practices to support the institution's overall security posture and reliable operation of enterprise authentication and authorization services.

• Support the integration of institutional applications and systems with IAM platforms using SAML, OAuth, OIDC, SCIM, and related technologies. Work with campus partners and vendors to ensure secure, standards based interoperability and timely resolution of access related requests.

• Maintain IAM related on-premise infrastructure, including on premises and cloud data center servers, ensuring systems are patched, updated, and aligned with institutional security standards. Support directory synchronization services, connectors, agents, and other IAM platform components to ensure operational stability.

• Create and maintain technical documentation, standard operating procedures, and knowledge resources. Provide tier three technical guidance and support to campus stakeholders, collaborates with IT and information security teams, and contributes to planning and continuous improvement of IAM services. Other duties as assigned.

Artificial Intelligence Identity Lifecycle Management

• Develop and maintain automation scripts, workflows, and tools including AI to improve the efficiency, accuracy, and reliability of IAM operations. Identify opportunities to streamline processes, reduce manual effort, and enhance service delivery in alignment with best practices and security baselines.

• Perform identity life cycle management activities, including the creation, modification, provisioning, de-provisioning, and reconciliation of accounts and AI agents across institutional systems. Ensure identities are provisioned accurately, consistently, and in compliance with university policies, standards, and regulatory requirements.

Identity Security and Risk Reduction

• Using industry leading tools such as CrowdStrike, monitor identity related security events, analyze authentication anomalies, and support security operations and incident response activities. Where possible, automate or use AI for remediation and implement preventive controls to reduce the risk of account compromise and unauthorized access.

• Support access governance functions by maintaining role based access models, entitlement structures, and authorization controls. Collaborate with the Application Role Security team to support access reviews, audit activities, and compliance with internal controls and external regulatory requirements.

Minimum Qualifications:

Bachelor's degree and 4 years of relevant experience; or High School Diploma (or equivalent) and 8 years of relevant work experience in lieu of degree oran equivalent combination of education and experiencepursuant toFla. Stat. 112.219(6).

Preferred Qualifications:

• Experience engineering administering and supporting cloud-based Identity and Access Management (IAM) platforms, including Microsoft Entra ID (Azure AD), Amazon Web Services (AWS), Google Cloud Platform (GCP), or similar enterprise identity solutions.

• Experience implementing, securing, and supporting identity federation and provisioning technologies such as SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Active Directory integrations.

• Experience monitoring, responding, and automating the response to identity-related security events using detection and response or security operations tools.

• Experience developing automation solutions and management such as the life cycle workflows of AI agents, scripts, or workflows.

• Experience supporting access governance, regulatory compliance, and identity lifecycle management in a large organization, preferably within higher education or a public-sector institution.

Special Instructions to the Applicants:

Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business.

The anticipated salary range for this position is $75,809 - $94,761. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.

All applicants mustbe authorized towork for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H1B transfers or employment-based visa processing for individuals currently sponsored by another employer.

Classification Title: Systems Engineer III

Department

Work Schedule

Type of Appointment

Expected Salary

Job Posting End Date

The University of Central Florida is an equal opportunity employer that does not discriminate against any employee or applicant for employment based on any characteristic protected by law. The University maintains programs for protected veterans and individuals with disabilities in accordance with all applicable federal and state laws.

As a Florida public university, the University of Central Florida makes all application materials and selection procedures available to the public upon request.

UCF is proud to be a smoke-free campus and an E-Verify employer.

For general application or posting questions, please email talent@ucf.edu.

If an accommodation due to a disability is needed to apply for this position, please email onac@ucf.edu.