Identity and Access Management DevOps Engineer

Lawrence Berkeley National Lab’s (LBNL) Information Technology Division has an opening for an Identity and Access Management DevOps Engineer to join the team. 

As a member of the IT Collaboration Services Group, this position will provide support for Berkeley Lab’s institutional Identity Management Service (IdM). This includes monitoring, developing, documenting, and maintaining the performance of complex systems and creating scripts and applications to support operation.

What You Will Do:

• Participate in the conception, planning, implementation, and support of new services to enable the future of cross-collaboration and multi-disciplinary research.
• Evangelize identity management services throughout the Laboratory community by demonstrating technical competence in these areas and providing excellent customer service.
• Collaborate with members of the Laboratory community directly and with their vendors to integrate our identities with their applications.
• Develop, enhance, and customize custom-developed and third-party software used in our environment, such as OpenLDAP, Shibboleth Identity Provider, Active Directory, OATH, and Google Cloud Identity Services.
• Continue the migration of our existing application base from standalone processes and Docker containers to Cloud orchestration solutions using Google Cloud Platform and AWS.
• Work with the cybersecurity team to implement identity solutions to secure Laboratory systems and services.
• Keep existing software, services, and operating systems up-to-date and running with high availability. Our systems provide access to and support virtually every business and collaboration system at the Laboratory, including our financial, HR, and Google Workspace services.
• Provide Tier II support for LBNL’s Google Workspace services by interfacing with Google support for technical issue resolution.

What is Required:

• Bachelor’s degree and a minimum of 6 years of related experience or an equivalent combination of education and experience.
• Wide-ranging expertise integrating diverse information/directory systems with homegrown solutions; versed in scripting new and existing solutions.
• Knowledge and experience with directory services such as OpenLDAP and Active Directory.
• Knowledge and experience with Docker containers.

Desired Qualifications:

• Previous experience in a research environment or a customer service delivery organization.
• Understanding U2F/WebAuthn/FIDO2, and PKI/smart cards.
• Understanding of InCommon’s Grouper access management.

Salary:

This position is expected to pay $142,752.00-$174,480.00 annually, which fits within the full salary range of $126,900.00-$214,140.00. Salary for this position will be commensurate with the final candidate’s qualification and experience, including skills, knowledge, relevant education, certifications, and aligned with the internal peer group.

Notes:

• This is a full-time career appointment, exempt (monthly paid) from overtime pay.
• This position may be subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
• This position is eligible for a hybrid work schedule - a combination of teleworking and performing work on site at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA. Work schedules are dependent on business needs. Individuals working a hybrid schedule must reside within 150 miles of Berkeley Lab.

Learn About Us:

Berkeley Lab (LBNL) addresses the world’s most urgent scientific challenges by advancing sustainable energy, protecting human health, creating new materials, and revealing the origin and fate of the universe. Founded in 1931, Berkeley Lab’s scientific expertise has been recognized with 16 Nobel prizes. The University of California manages Berkeley Lab for the U.S. Department of Energy’s Office of Science.

Working at Berkeley Lab has many rewards including a competitive compensation program, excellent health and welfare programs, a retirement program that is second to none, and outstanding development opportunities. To view information about the many rewards that are offered at Berkeley Lab- Click Here.

Berkeley Lab is committed to Inclusion, Diversity, Equity and Accountability (IDEA) and strives to continue building community with these shared values and commitments.

Berkeley Lab is an Equal Opportunity and Affirmative Action Employer. We heartily welcome applications from women, minorities, veterans, and all who would contribute to the Lab’s mission of leading scientific discovery, inclusion, and professionalism. In support of our diverse global community, all qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or protected veteran status. 

Equal Opportunity and IDEA Information Links: Know your rights, click here for the supplement: "Equal Employment Opportunity is the Law" and the Pay Transparency Nondiscrimination Provision under 41 CFR 60-1.4.