[Hiring] Identity Management Developer @Cornell University

Role Description

The Identity Management Developer (CEMI) provides cybersecurity-focused technical leadership and engineering expertise in support of Cornell University’s Identity & Access Management services within the university IT Security Office (ITSO). This position plays a key role in ensuring the secure, reliable, and effective delivery of enterprise authentication, authorization, and directory services that underpin the university’s academic, research, and administrative operations.

• Operate primarily in an engineering-focused capacity, contributing deep technical expertise to the design, planning, implementation, and ongoing improvement of identity services.
• Maintain a strong security posture while enabling scalability, resiliency, and ease of use for a broad and varied campus community.
• Serve as a key liaison between ITSO, campus business units, and external partners.
• Support strong service relationships by helping stakeholders understand identity service capabilities, status, and access processes.
• Translate complex technical concepts into clear, non-technical guidance when needed.
• Contribute to the evolution of next-generation Identity Management solutions by collaborating with vendors, peer institutions, and internal partners.
• Work collaboratively within the Identity Management team and across ITSO to meet service levels, support operational objectives, and respond effectively to system outages or changes.
• Expected to foster a culture of belonging and a healthy work environment by communicating across differences and supporting work/life integration.

Qualifications

• Bachelor’s degree with a minimum of three to five years of relevant experience, or an equivalent combination of education and experience.
• Demonstrated success providing technical support and application or middleware development in a distributed, team-focused computing environment.
• Demonstrated expertise with one or more scripting or programming languages, such as Java, Perl, Python, and/or VB (.NET), ReactJS, Ruby, and/or PHP.
• Approximately 1 year+ of professional experience developing ReactJS applications and/or Ruby on Rails.
• System administration experience with Linux required; Windows experience preferred.
• Working to advanced knowledge of one or more identity and access management technologies, including directory services, virtual directories, SAML2, OAuth2, LDAP, and Active Directory authorization technologies.
• Proven experience writing technical design documentation, conducting code reviews, and working with version control systems such as Git.
• Ability to translate user and business needs into clear functional requirements and technical specifications.
• Demonstrated ability to communicate complex Identity Management concepts into business terms that are clear, accessible, and meaningful to non-technical stakeholders.
• Proven ability to work effectively in a dynamic, deadline-driven, and complex environment with multiple competing priorities.
• Strong facilitation, problem-solving, analytical, reasoning, and judgment skills.
• Experience supporting and managing mission-critical systems in a production environment, including troubleshooting and incident response.
• Proven ability to identify, scope, and implement opportunities for automation or architectural improvements.
• Ability to cultivate and develop inclusive working relationships with students, faculty, staff, and community members.

Requirements

• Experience working in higher education, research, or similarly complex enterprise environments.
• Familiarity with cloud-based identity platforms and services (e.g., Azure AD, AWS IAM, Google Identity, or similar).
• Experience with identity lifecycle management, provisioning/de-provisioning workflows, and access governance.
• Knowledge of zero trust, least-privilege, and modern identity security architectures.
• Experience integrating identity services with enterprise applications, including SaaS platforms and custom applications.
• Demonstrated experience participating in cross-functional technical initiatives.
• Experience supporting incident response, audits, or compliance efforts related to identity and access management.
• Familiarity with DevOps or CI/CD practices, automated deployments, and infrastructure-as-code concepts.
• Strong customer-service orientation with the ability to balance security requirements with usability and operational needs.

Benefits

• Comprehensive health care options.
• Generous retirement contributions.
• Access to wellness programs.
• Employee discounts with local and national retail brands.
• Health and personal leave, three weeks of vacation, and 13 holidays.
• Tuition-free Extramural Study and Employee Degree Program.
• Tuition aid for external education.
• Cornell Children's Tuition Assistance Program.