About the role: 

Blackbaud is seeking a Staff Identity and Privileged Access Management (IAM/PAM) Administrator (Tier-2) to support by providing advanced operational and technical support for IAM and PAM services. This role owns deeper troubleshooting, root cause analysis (RCA), recurring failure elimination, and routing platform/configuration changes within approved standards.  

What you’ll be doing: 

• Partner closely with engineering and security/IT leadership to improve stability, scale onboarding, and mature both IAM and PAM programs.  

• Troubleshoot complex IAM issues to include failed provisioning chains, attribute mapping errors, workflow and connection failures. 

• Perform RCA and recurring IAM incidents and implement durable fixes. 

• Execute routing IAM configuration changes within standards (role models, workflows, integrations).  

• Lead operational support for access certification and remediation closure.  

• Own remediation of complex PAM failures (CPM/connector issues, reconciliation, platform bugs).  

• Perform RCA for rotation failures, session issues, and onboarding gaps.  

• Execute routing PAM configuration changes (platforms, policies, safes). 

• Support upgrades/patching execution and validation under engineering standards. 

• Participate in shift/on-call rotations for incident response.  

• Drive problem management to eliminate repeat incidents.  

• Produce operational reporting and contribute to KPIs/KRIs for IAM and PAM programs. 

• Act as an escalation point for the service desk. 

What we’ll want you to have: 

• 3+ years in IAM/PAM operations or identity engineering support.  

• Familiarity with enterprise directory services (AD, Entra ID and AWS directory services). 

• Troubleshooting skills across Windows, Linux, directory services, and Cloud environments (Azure & AWS).  

• Comfortable following runbooks and standardized procedures. 

• Hands-on experience with enterprise IAM/IGA and PAM platforms (e.g., SailPoint, CyberArk, and BeyondTrust).  

• Able to work flexible hours as required by business priorities.