Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

Identity & Access Management Engineer

Davidson40 open roles

Where
Davidson, NC, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity & Access Management EngineerDavidson · Davidson, NC, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Davidson's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. Davidson postings stay open a median of 11 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 4 days ago

Davidson median: 11 days open

The posting

Job Description

Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.

The role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.

Specifically... Identity and Access Management Engineering (45%)

  • Administer and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.
  • Own identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.
  • Administer RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.
  • Administer Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.
  • Maintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.
  • Resolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.
  • Design and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).

Directory and Authentication Services (25%)

  • Administer the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.
  • Manage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.
  • Maintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.

Governance, Consultation, and Documentation (10%)

  • Serve as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.
  • Consult with campus offices on access needs and data-owner responsibilities.
  • Maintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.

Systems Administration (20%)

  • Maintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.
  • Support backup and recovery for identity systems, including restoration testing.
  • Participate in documented change management (CAB) and share in the Infrastructure on-call rotation.
  • Automate operational tasks with scripting and AI-assisted development techniques.
  • General server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.

Requirements

  • Bachelor's degree or equivalent combination of education and relevant experience.
  • 5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.
  • Strong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.
  • Practical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.
  • Scripting proficiency (PowerShell, Python, or similar) for identity automation.
  • Security-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.
  • Clear communication with technical and non-technical audiences; strong documentation habits.

Preferences

  • Experience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.
  • Experience with InCommon, certificate management, or PKI, including automating certificate renewal.
  • Experience supporting identity for AI and agentic platforms, API access management, or service-account governance.
  • Higher education experience, including FERPA and GLBA aware access design.
  • Relevant certifications (for example, Microsoft Identity and Access Administrator).
  • Familiarity with identity threat detection and response tooling.

Information about how to submit an application can be found at https://employment.davidson.edu.

About Us

Davidson is a highly selective, nationally ranked, residential liberal arts college located in Davidson, North Carolina, near Charlotte. We seek to hire talented faculty and staff who are committed to achieving excellence within an inclusive community where diverse backgrounds and perspectives are valued.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Davidson's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Davidson's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Davidson's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.