IAM Automation Engineer III, BU Info Security

If you like identity work but would rather automate a process than run it, we want to talk to you. Boston University's Identity and Access Management team supports Active Directory, Microsoft Entra ID, SailPoint IdentityIQ, and Radiant Logic across a mixed Linux and Windows environment, and we're modernizing the service as we go. This role does the same engineering work as the rest of the team, with one difference: we expect you to build it as code. Version control, pipelines, tests that run before a change ships, and monitoring you didn't have to remember to check. We also expect real fluency with current AI tooling — working in AI-assisted development environments day to day, using AI to help generate and validate tests and review code, and applying models to identity problems like entitlement mining, access request triage, and anomaly detection. That includes building MCP integrations that connect AI tools to our systems safely, and knowing when an AI approach is the wrong answer. The part that makes this role unusual is that raising everyone else's capability is a permanent part of the job, not a side project. You'll pair with colleagues on their first automation, build the patterns other people reuse, run working sessions, and keep the team current as the tooling shifts under all of us. If you like that kind of work, you'll have real room to shape how a major research university does this. You'll join a collaborative team with strong benefits, including tuition remission.

Required Skills

• Bachelor's degree in a related field or equivalent experience.
• 3+ years of related experience in identity and access management, security engineering, or infrastructure engineering, including hands-on software development and automation work.
• Proficiency in at least one general-purpose programming language: Python, Go, Java, C#, or PowerShell.
• Git-based version control, and experience building CI/CD pipelines that include automated testing.
• Practical experience writing automated tests, including unit, integration, and regression tests.
• REST API and directory service integration: LDAP, SAML, OAuth 2.0, OIDC, SCIM.
• Linux and Windows administration.
• Demonstrated fluency with current AI tooling, including routine use of AI-assisted development environments and practical experience integrating large language models or AI services into working tools using tool and function calling, retrieval-augmented generation, or agentic patterns.
• Judgment about where AI output requires verification, and an understanding of how AI-generated code and tests fail.
• Working understanding of the security risks specific to AI systems, including prompt injection, data leakage through model context, and authorization for non-human and agentic principals.
• A track record of teaching or enabling colleagues: pairing, internal training, documentation others actually use, or reusable patterns adopted by a team.

 

Bonus Qualifications:

• If you do not meet these, you are still encouraged to apply; we value employees with a willingness to learn.
• Model Context Protocol (MCP) server or client development - Infrastructure as code (Terraform, Ansible) and containerization (Docker, Kubernetes)
• Enterprise IAM platform experience, particularly SailPoint IdentityIQ, Radiant Logic, or Microsoft Entra ID.
• Applying machine learning to access, entitlement, or authentication data.
• Higher education experience.

 

Boston University offers an excellent benefits package including:

• Time Off: In addition to PTO and leave policy, BU employees have a paid intersession break and 13 paid holidays.
• Retirement: University-funded retirement plan with full vesting after 2 years of eligible service.
• Tuition Assistance Program: Competitive tuition assistance program for yourself and family members.
• Check out https://www.bu.edu/wellness/ and https://www.bu.edu/hr/part-time-employee-perks/ for more information!
• Boston University IS&T invests in our staff and their personal and professional growth.

 

We promote staff learning including lunch and learn sessions, an extensive library of online courses, Fun Advisory Board (FAB) arranges a number of events throughout the year and opportunities to engage with peers at NERCOMP and EDUCAUSE events. If you require a reasonable accommodation in order to complete the employment application process, please contact the Equal Opportunity Office at 617-353-6474. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We, at IS&T, appreciate each individual's knowledge, experiences and insights which enhance who we are, and as our DEIA knowledge and practice grows, we will ensure that our Mission, Vision, & Practices remain equitable and welcoming to all.

 

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, natural or protective hairstyle, religion, sex, age, national origin, physical or mental disability, sexual orientation, gender identity, genetic information, military service, pregnancy or pregnancy-related condition, or because of marital, parental, or veteran status. We are a VEVRAA Federal Contractor. 

Required Experience