Department

F&A ITS - Identity and Access Management

About the Department

IT Services collaborates with campus partners to support the mission of the University of Chicago through the consistent delivery of high-quality solutions and services.

Job Summary

Under broad direction, this role leads the administration and strategic advancement of a sophisticated directory services environment, integrating Active Directory, Azure Active Directory, Oracle Directory Server Enterprise Edition, and Okta Universal Directory. The incumbent is responsible for designing, architecting, and implementing cutting-edge solutions that align with business goals and support mission-critical IT services. They play a key role in evaluating and optimizing server technologies, platforms, and frameworks, ensuring alignment with both current and future organizational needs.

As the lead contributor, this position requires active participation in regional and national Identity and Access Management (IAM) communities, fostering innovation and industry best practices. This role involves collaboration with key stakeholders, business analysts, and cross-functional technical teams to resolve complex system integration challenges, ensure compatibility across multiple platforms, and implement continuous improvements.

Responsibilities

Leads the design and deployment of enterprise-wide directory services, ensuring robust, scalable, and secure solutions that align with evolving business priorities.Oversees tier two support for all IAM services, providing expert-level problem resolution and continuous improvement initiatives.Develops comprehensive technical documentation and instructional content, including knowledge base articles and training videos, to enhance system usability and operational efficiency.Coaches and mentors junior technical staff, including student Support Analysts, fostering skill development and technical proficiency.Leads the design and global implementation of Active Directory Infrastructure, including Group Policy configuration and domain consolidation for large-scale, complex organizations.Drives the execution of Active Directory Domain upgrades, ensuring minimal disruption and full compliance with organizational standards.Designs Group Policy Objects to enforce compliance with security standards and organizational policies across server and user environments.Engages with university divisions, departments, and cross-functional teams to gather requirements, drive consensus, and deliver enterprise-level IAM solutions that meet diverse business and technical needs.Ensures adherence to configuration and security standards, implementing rigorous change management processes and driving the adoption of best practices.Provides thought leadership on system usage policies, advising on governance, security, and service management across the IAM ecosystem.Possesses deep expertise in Microsoft Windows OS architecture, including AD Forests, Domains, Trusts, DNS, DHCP, Group Policy, and Organizational Units, driving continuous improvement and innovation in these areas.Leads recurring projects, such as Directory Reviewer Refresh, ensuring they are aligned with organizational goals and delivered on time.Works proactively with stakeholders across university divisions to gather insights, address evolving needs, and implement IAM solutions that enhance the university’s technological capabilities.Guides the administration of operating systems, maintains security, and implements backup procedures for the organization's information systems and peripheral equipment, such as servers, desktops, printers, and storage devices.Provides expertise in planning and installing necessary patches and upgrades for servers and their associated storage, network, communications, and peripheral sub-systems. Installs and maintains an appropriate level of intrusion detection, monitoring, and auditing software as required.Tracks compliance and maintains documentation for hardware, software, and service inventories for management reports.Performs other related work as needed.

Minimum Qualifications

Education:

Minimum requirements include a college or university degree in related field.

Work Experience:

Minimum requirements include knowledge and skills developed through 7+ years of work experience in a related job discipline.

Certifications:

---

Preferred Qualifications

Education:

Bachelor's degree in information technology.

Experience:

Coaching and mentoring junior resources.

Technical Skills or Knowledge:

Advanced experience in all aspects of Active Directory architecture and administration (Schema, Replication, DNS, Permissions flow, Trust Management, Group Policy Management, Backup/Recovery, Security).Privileged access management.Identity and access management.

Preferred Competencies

Professional and effective written and oral communication skills.Analytical and quantitative skills and diagnostic techniques to resolve problems.Manage complex technical details.Familiarity with project management and business analyst processes and methodology.Communicate technical concepts to non-technical staff.Effectively converse with, and listen to, all levels of users to understand their environment and the impact of system changes.Sensitivity to the cultural requirements on a campus for collegial and participative interactions.Work in a collaborative team environment.Confidentiality related to sensitive University matters such as, strategic initiatives, trade secrets, quiet periods, and scientific discoveries yet to be put in the public domain.Confidentiality related to personal information access.

Working Conditions

Standard office environment.

Application Documents

Resume/CV (required)Cover Letter (required)

When applying, the document(s) MUST be uploaded via the My Experience page, in the section titled Application Documents of the application.

Job Family

Information Technology

Role Impact

Individual Contributor

Scheduled Weekly Hours

37.5

Drug Test Required

No

Health Screen Required

No

Motor Vehicle Record Inquiry Required

No

Pay Rate Type

Salary

​
FLSA Status

Exempt

​
Pay Range

$130,000.00 - $140,000.00

The included pay rate or range represents the University’s good faith estimate of the possible compensation offer for this role at the time of posting.

Benefits Eligible

Yes

The University of Chicago offers a wide range of benefits programs and resources for eligible employees, including health, retirement, and paid time off. Information about the benefit offerings can be found in the Benefits Guidebook.

Posting Statement
 

The University of Chicago is an Affirmative Action/Equal Opportunity/Disabled/Veterans and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender, gender identity, national or ethnic origin, age, status as an individual with a disability, military or veteran status, genetic information, or other protected classes under the law. For additional information please see the University's Notice of Nondiscrimination.

 

Staff Job seekers in need of a reasonable accommodation to complete the application process should call 773-702-5800 or submit a request via Applicant Inquiry Form.

 

We seek a diverse pool of applicants who wish to join an academic community that places the highest value on rigorous inquiry and encourages a diversity of perspectives, experiences, groups of individuals, and ideas to inform and stimulate intellectual challenge, engagement, and exchange.

 

All offers of employment are contingent upon a background check that includes a review of conviction history.  A conviction does not automatically preclude University employment.  Rather, the University considers conviction information on a case-by-case basis and assesses the nature of the offense, the circumstances surrounding it, the proximity in time of the conviction, and its relevance to the position.

 

The University of Chicago's Annual Security & Fire Safety Report (Report) provides information about University offices and programs that provide safety support, crime and fire statistics, emergency response and communications plans, and other policies and information. The Report can be accessed online at: http://securityreport.uchicago.edu. Paper copies of the Report are available, upon request, from the University of Chicago Police Department, 850 E. 61st Street, Chicago, IL 60637.