Director, Identity & Access Management

Department:

Information Security Administration

-----

Information Security Engineering and Operations

Position Title:

Director, Identity & Access Management

Job Family Group:

Professional Staff

Job Description Summary:

The One KU Director, Identity & Access Management (IAM) provides strategic vision, operational leadership, and technical direction for enterprise-wide identity and access management systems across the University of Kansas system. This role guides the design, implementation, integration, and ongoing operations of IAM services, ensuring robust security, efficiency, and user experience. The Director oversees the IAM teams at both KU Lawrence and KU Medical Center, aligning initiatives to enterprise goals while fostering collaboration across campuses.

Job Description:

Job Responsibilities:

Strategic and Technical Leadership

• Lead and evolve a comprehensive IAM strategy across OneKU, ensuring alignment with security policies, regulatory requirements, and enterprise objectives.
• Oversee the architecture, design, implementation, and maintenance of IAM platforms including directories, provisioning systems, SSO, MFA, and identity governance.
• Evaluate and implement emerging IAM technologies and frameworks to meet university needs.

Operations and Engineering Oversight

• Provide day-to-day oversight of IAM operations across all environments, ensuring high availability, integrity, and performance of identity services.
• Monitor and resolve operational issues related to account lifecycle management, provisioning/deprovisioning, and authentication.
• Ensure consistency, documentation, and adherence to standards in IAM-related development and system changes.

Project Management and Implementation

• Direct multiple complex IAM projects including integrations with enterprise applications and cloud platforms.
• Collect and define technical and functional requirements, supervise development lifecycles, and ensure timely delivery.
• Promote Agile practices, change management protocols, and project tracking tools.

Team Leadership and Collaboration

• Lead and develop IAM teams across campuses, including mentoring, hiring, performance management, and fostering innovation.
• Promote cross-functional collaboration with cybersecurity, application development, HR, and academic units.
• Build a shared culture of technical excellence and code review/knowledge transfer.
• Develop organizational staffing plans and ensure that employees with the appropriate experience and skills are hired, onboarded, trained, supervised, have individual goals and development plans; Conducts annual performance evaluations and where necessary implement appropriate employee discipline.

Policy, Compliance, and Risk Management

• Develop and maintain IAM-related policies, standards, and procedures.
• Ensure compliance with HIPAA, FERPA, NIST, and other regulatory requirements.
• Support audits and risk assessments by providing documentation and technical expertise.
• Ensure area employees conduct activities in a professional and ethical manner, and in accordance with KUMC Policies and applicable local, state and federal laws and regulations.
• Ensure all work performed by employees in the area is done in a safe and secure manner.
• Direct coordination of area work with other areas of KUMC to ensure integration and support of KUMC goals and objectives.
• Maintain personal level of subject matter expertise necessary to ensure the area activities are carried out on a best practices basis.
• Participate in and/or lead appropriate committees, task force, or other similar activities assuring optimal resource utilization.
• Ensure that necessary electronic data collection, storage and retrieval systems are implemented and used by area personnel in an appropriate fashion.
• Ensure that the area maintains any certifications desired by KUMC to further promote quality education and research.
• Ensure the confidentiality of medical center, employee, and patient information. Handle sensitive data with discretion and in accordance with KUMC policies and legal requirements.
• Maintain the highest standards of integrity, respect, professional conduct, and ethical standards.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. It is only a summary of the typical functions of the job, not an exhaustive list of all possible job responsibilities, tasks, duties, and assignments. Furthermore