Apply on Employer Site

University of California, San Francisco · 2 weeks ago

Identity & Access Management Administrator

San Francisco, CA

Full-time

Onsite

Mid, Senior Level

$114K/yr - $243K/yr

5+ years exp

The University of California, San Francisco (UCSF) is a leading academic healthcare organization, and they are seeking an IAM Credential Administrator to oversee and manage user credentials across various systems. This role is responsible for ensuring secure access management and optimizing identity governance processes to support UCSF’s mission in healthcare, education, and research.

AssociationBiotechnologyEducationMedicalPharmaceutical

No H1B

Hiring Manager

Ricardo Moran, RACS

Responsibilities

Ensuring the secure and efficient provisioning, maintenance, and revocation of user credentials in accordance with institutional policies and regulatory requirements

Design, implementation, and optimization of Badge login solutions to enhance secure authentication, single sign-on (SSO), and identity governance

Partnering closely with stakeholders to enhance credential management processes and provide support to UCSF’s Health, Education, and Research organizations

Ensuring UCSF’s IT infrastructure is operable, secure, efficient, and effective in service of the University’s mission

Delivering exceptional information technology services comprehensively and consistently across customers and stakeholders

Qualification

IdentityAccess ManagementMicrosoft Active DirectoryIAM tools proficiencyPowerShell scriptingData encryption technologiesSingle Sign-On (SSO)Multi-factor authentication (MFA)Project managementHealthcare IT regulationsZero-trust security modelsCertifications in IAMCommunicationProblem-solving skillsOrganizational skillsCreative thinkingRelationship building

Required

Bachelor's degree or equivalent combination of experience/training in computer science, information technology, cybersecurity, or a related field

Five years or more of experience working in one or more of the following fields: IAM, cybersecurity, computer science, computer information systems, etc

Experience administering Microsoft Active Directory (AD) in a large, complex, multi-domain environment

Experience administering Imprivata OneSign or other identity/access management solutions in production for a large complex organization

Advanced knowledge of identity and access management concepts, including authentication, authorization, provisioning, and identity lifecycle management

Extensive proficiency in using IAM tools and platforms such as Okta, SailPoint, Microsoft Azure AD, Ping Identity, and others

Experience with directory services (e.g., Active Directory, LDAP), Single Sign-On (SSO) technologies, and multi-factor authentication (MFA) solutions

Strong PowerShell scripting skills

Broad knowledge of data encryption technologies and experience selecting and applying appropriate data encryption technologies

Excellent skills in diagnosing and resolving technical issues related to IAM systems and integrations

Extensive ability to manage IAM projects, including planning, execution, monitoring, and closing, ensuring timely delivery and adherence to scope and budget

Excellent written and verbal communication skills and ability to communicate complex technical ideas to a diverse community of colleagues and stakeholders. Can relay technical information to audiences of technical and non-technical stakeholders

Advanced ability to establish and advance positive working relationships and a strong rapport with a diverse community of colleagues including team members, stakeholders, and customers

Advanced organizational skills and ability to balance competing priorities and deliver concurrent projects to various stakeholder types. Experience working in a project-based environment using leading project management practices including schedule management, status reporting, and communication of project risks and issues

Advanced problem-solving skills; ability to uncover root of difficult problems and scope solutions based on knowledge of available resources and timelines as well as awareness of vision and strategy. Seeks information from multiple and diverse sources to inform solutions. Demonstrated ability to make decisions with integrity

Ability to think creatively and introduce innovations such as the incorporation of new technologies or processes. Thrives in an ever-changing, fast-paced environment

This position requires on-site work based on business needs. Also, we are not sponsoring any type of Visa's

Preferred

Bachelor's degree or equivalent combination of experience/training in computer science, information technology, cybersecurity, or related field

Seven or more years of experience working in one or more of the following fields: IAM, cybersecurity, computer science, computer information system

Experience integrating badge login platforms (e.g., Imprivata) with HER/EMR systems (Epic, Cerner), Citrix, VMware, and cloud IAM platforms

Familiarity with zero-trust security models, privileged access management (PAM) and endpoint security

Understanding of healthcare IT regulations (HIPAA, HITRUST, NIST 800-53, etc.)

Experience in complex higher education environments, serving academic, medical, and research and administrative functions of a large public university

One or more of the following certifications: Certified Identity and Access Manager (CIAM), Certified Access Management Specialist (CAMS), Microsoft Certified: Identity and Access Administrator Associate (SC-300), Cisco Certified Network Professional (CCNP) Security, Cisco Certified Internetwork Expert (CCIE) Security, Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or equivalent certification