SSO/MFA Lead
![]() | |
![]() United States, California, Los Angeles | |
![]() 3720 Flower Street (Show on map) | |
![]() | |
SSO/MFA Lead
Apply Information Technology Services ITS Los Angeles, California ABOUT THE DEPARTMENT The University of Southern California (USC) is advancing its cybersecurity posture with a renewed focus on resilience, cyber risk management, and threat-informed defense. As a world-class research institution, USC is building a culture of security that supports its academic and research mission in a rapidly evolving threat landscape. This role sits within a newly restructured cybersecurity organization that's leading this transformation. You'll join a team focused on scalable, proactive defense strategies, incident preparedness, and operational excellence-working alongside experts who are deeply committed to service, innovation, and impact. If you're driven by purpose, thrive in complexity, and want to help shape the future of cybersecurity at a leading university, we invite you to bring your leadership to the table. POSITION SUMMARY As theSSO & MFA Leadyou will be an integral memberof the cybersecurity departmentwhile also collaborating with stakeholders across the university ecosystem, andreporting to the Manager PAM & SSO Services. This is a full-time exempt position, eligible for all of USC's fantastic Benefits + Perks.This opportunity is remote. The SSO & MFA Lead is responsible for overseeing the management and operations of Single Sign-On (SSO) solutions, such as ForgeRock, Shibboleth, Multi-Factor Authentication (MFA) systems, Identity Proofing, and Account Take Over prevention. Leads the product offering (e.g., overall strategy, development, lifecycle management), responsible for managing projects, prioritizing tasks and directing both engineering and operational activities. Ensures the security, integrity and efficient functioning of SSO systems, collaborates with various departments to meet regulatory requirements, and provides leadership and mentorship. The SSO & MFA Leadwill:
MINIMUM QUALIFICATIONS Greatcandidates for the position of SSO & MFA Leadwill meet the following qualifications:
PREFERRED QUALIFICATIONS Exceptional candidates for the position of SSO & MFA Leadwill also bring the following qualifications or more:
In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC's Unifying Values of integrity, excellence, community, well-being, open communication, and accountability. SALARY AND BENEFITS The annual base salary range for this position is $150,433.13 to $168,158.88. When extending an offer of employment, the University of Southern California considers factors such as (but not limited to) the scope and responsibilities of the position, the candidate's work experience, education/training, key skills, internal peer alignment, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations. To support the well-being of our faculty and staff, USC provides benefits-eligible employees with a broad range of perks to help protect their and their dependents' health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package. You can learn more about USC's comprehensive benefits here. Join the USC cybersecurity team within an environment of innovation and excellence. Minimum Education: Bachelor's degree Addtional Education Requirements Combined experience/education as substitute for minimum education Minimum Experience: 5 years in Identity and Access Management. Minimum Skills: Experience in SSO and MFA solutions. Expertise in designing and implementing SSO and MFA frameworks, ensuring seamless integration with enterprise applications. Knowledge of authentication protocols such as SAML, OAuth, OpenID Connect and related technologies. Strong understanding of security best practices for authentication and access control. Proven ability to monitor and optimize SSO and MFA performance, ensuring high availability. Experience with cloud-based identity platforms like Okta, Ping Identity or Azure AD. Strong troubleshooting skills and ability to resolve authentication-related issues promptly. Effective communication skills for working with technical and non-technical stakeholders. Preferred Certifications: Relevant certifications, such as CISSP, CISM and product-specific certification. Preferred Experience: 7 years REQ20164636 Posted Date: 08/14/2025 Apply |