University of California Berkeley Hiring for Identity and Access Management Systems Administrator (0520U), Berkeley IT – 41278 Job at Berkeley, CA Full Time

Identity and Access Management Systems Administrator (0520U), Berkeley IT – 41278 About Berkeley

At the University of California, Berkeley, we are committed to creating a community that fosters equity of experience and opportunity, and ensures that students, faculty, and staff of all backgrounds feel safe, welcome and included. Our culture of openness, freedom and belonging make it a special place for students, faculty and staff.

The University of California, Berkeley, is one of the world’s leading institutions of higher education, distinguished by its combination of internationally recognized academic and research excellence; the transformative opportunity it provides to a large and diverse student body; its public mission and commitment to equity and social justice; and its roots in the California experience, animated by such values as innovation, questioning the status quo, and respect for the environment and nature. Since its founding in 1868, Berkeley has fueled a perpetual renaissance, generating unparalleled intellectual, economic and social value in California, the United States and the world.

We are looking for equity-minded applicants who represent the full diversity of California and who demonstrate a sensitivity to and understanding of the diverse academic, socioeconomic, cultural, disability, gender identity, sexual orientation, and ethnic backgrounds present in our community. When you join the team at Berkeley, you can expect to be part of an inclusive, innovative and equity-focused community that approaches higher education as a matter of social justice that requires broad collaboration among faculty, staff, students and community partners. In deciding whether to apply for a position at Berkeley, you are strongly encouraged to consider whether your values align with our Guiding Values and Principles , our Principles of Community , and our Strategic Plan .

Departmental Overview

Berkeley IT believes in and fosters a workplace environment where people can bring their diverse skills, perspectives and experiences toward achieving our goals through a process of critical inquiry, discovery, innovation, while simultaneously committing to making positive contributions towards the betterment of our world.

In addition, members of the Berkeley IT community have created and endorse the following values for our organization to augment and amplify the campus principles:

We champion diversity.

We act with integrity.

We deliver.

We innovate.

Diversity, Inclusion, and Belonging are more than just suggestions for us. They are the guiding principles underlying how we come together, develop leaders at all levels of the organization, and create an environment that unites us. We affirm the dignity of all individuals, call upon our leaders to address critical issues with integrity and intention, respect our differences as well as our commonalities, and strive to uphold a just community free from discrimination and hate.

The Information Security Office (ISO) in Berkeley IT coordinates the risk management process for UC Berkeley’s information systems and directs campus-wide efforts to adequately secure Institutional data. ISO is led by the Chief Information Security Officer and consists of seven areas: Information Security Policy, Information Security Operations, Information Security Development, Identity and Access Management,

Information Security Assessments, Outreach and Engagement, and Service Management. This position is part of the Identity and Access Management team (CalNet) and reports to the IAM Manager.

The incumbent researches, conceptualizes, plans and implements complete and integrated identity management technical solutions for the UC Berkeley campus. Regularly works on highly complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Exercises judgment in selecting methods, techniques and evaluation criteria for obtaining results. Gives technical presentations to associated technical teams including the CalNet Technical Team and Steering Committee, the campus IT Architecture Committee, the Campus Information Security and Privacy Committee, and the UC Trust working group.

Application Review Date

The First Review Date for this job is: September 2, 2022.

Responsibilities

**This is a remote-friendly position, eligible for 100% remote capability.**

CalNet is seeking an experienced, organized and collaborative technologist to design, develop, implement and support a broad suite of Identity and Access Management applications and services. The successful candidate will split time between analyzing complex data issues and implementing technical solutions and. They will be equally comfortable working with people and technology.

As a key member of this team, you will be responsible for helping to deliver a complex service portfolio. You will tackle log analysis in ELK, schema analysis in LDAP and data analysis in PostgreSQL. You will interact with deeply technical and non-technical members of the team. You will design and develop solutions to increase automation and the reliability of CalNet service delivery. Your goal will be to make your mark on this core campus infrastructure by being creative, reliable and skilled.

Required Qualifications

Expert-level knowledge of system and applications design and implementation. Solid understanding of and experience managing LDAP directory services and integration. Substantial experience with *NIX systems, particularly Red Hat Enterprise Linux. Familiarity with web servers (especially NGINX and/or Apache/Tomcat), load balancers, firewalls, DNS. Familiarity with technologies/frameworks/concepts critical to implementing middleware solutions, including messaging technologies, a variety of DB platforms (especially Oracle), and SOA/REST/Web Services/etc. Ability to write complex code in one or more of the following: Ruby, Java, Javascript, Python, and Groovy. Expert knowledge of PostgreSQL. Experience developing and maintaining secure web applications. Experience running Tomcat or similar application servers. Experience performing log analysis with Elastic Stack. Advanced level judgment and leadership to solve the most complex technical problems. Ability to establish and maintain effective working relationships at all levels with staff internal and external to bIT as well as with vendors and clients. Must be able to communicate technical information in a clear and concise manner across the organization and at varying levels. Ability to produce clearly written technical documentation. Has knowledge necessary to design, set-up, operate, and correct malfunctions involving application of technology systems. Demonstrated commitment to the advancement of diversity, equity, inclusion, belonging, and justice.

Education

Bachelor’s degree in related area and/or equivalent experience/training.

Preferred Qualifications

Requires knowledge of other areas of IT. Expert knowledge of Identity and Access Management practices and technologies. Experience with ForgeRock Directory Services. Experience with the Internet2 Trusted Access Platform, specifically Grouper and Shibboleth. Experience with AWS, Azure and/or Google Cloud. Experience automating systems build and provisioning using tools such as Ansible, Terraform, and CloudFormation. Experience deploying containerized systems in a production environment.

Salary & Benefits

This is a full-time (40 hours/week), career position, and eligible for full UC benefits. This is an exempt, monthly paid position. The annual salary is commensurate with experience within the range of $101,300.00 – $146,800.00. For information on the comprehensive benefits package offered by the University visit: https://ucnet.universityofcalifornia.edu/compensation-and-benefits/index.html