Lawrence Berkeley National Laboratory's (LBNL) Information Technology Division is hiring for an experienced Identity Management Engineer. As a member of the IT Collaboration Services Group, this position will provide support for Berkeley Lab's institutional Identity Management Service (IDM). This includes monitoring, developing, documenting, and maintaining the performance of complex systems and creating scripts and applications to support operation. This position will work with our existing IDM architect and other members of the Collaboration Services Group and apply wide-ranging expertise to help build our capabilities to enable enterprise security and scientific collaboration using a combination of tools and technologies. Day to day responsibilities will include helping manage systems and services from our own on-premises infrastructure; operating our growing array of cloud services, including IaaS, PaaS, and SaaS solutions; and working with scientific and enterprise groups across the Laboratory to implement identity solutions for their services.
What You Will Do:
Keep existing software, services, and operating systems up-to-date and running with high availability. Our systems provide access to and support virtually every business and collaboration system at the Laboratory, including our financial, HR, and Google Workspace services.
Collaborate with members of the Laboratory community directly and with their vendors to integrate our identities with their applications.
Develop, enhance, and customize custom-developed and third-party software used in our environment.
Continue the migration of our existing application base from standalone processes and Docker containers to container orchestration solutions.
Work with the cybersecurity team to ensure that our identity solutions are enhancing the security of Laboratory systems and services.
Evangelize identity management services throughout the Laboratory community by demonstrating technical competence in these areas and providing excellent customer service.
Participate in the conception, planning, implementation, and support of new services and capabilities.
Provide tier II support for LBNL's Google Workspace services by interfacing with Google support for technical issue resolution.
Work on and resolve complex issues where analysis of situations or data requires an in-depth evaluation of variable factors.
Determine methods and procedures on new assignments and may coordinate activities of other personnel.
What is Required:
Bachelor's degree and a minimum of 8 years of related experience or an equivalent combination of education and experience.
Wide-ranging expertise integrating diverse information/directory systems with homegrown solutions; well-versed in scripting from whole-cloth as well as extending existing solutions.
Experience with the deployment and support of web servers and web services, such as Apache httpd, Apache Tomcat, Jetty, and NodeJS with Express.
Hands-on experience with web single sign-on solutions, especially SAML and OpenID Connect, with specific experience with the Shibboleth Identity Provider.
Knowledge and experience with directory services such as OpenLDAP and Active Directory.
Understanding of multifactor authentication with OATH OTP tokens, U2F/WebAuthn/FIDO2, and PKI/smart cards.
Deep understanding of web protocols, especially web session handling.
Working knowledge of relational database management systems such as Oracle, MS SQL Server, and MySQL.
Ability to network and collaborate with key contacts outside your own area of expertise.
Excellent troubleshooting skills with the ability to work on and resolve complex technical issues in creative and effective ways.
Advanced degree in electronics Engineering, Computer Science, Computer Systems Technology, or a related field.
Previous experience in a research environment or a customer service delivery organization desirable.
This is a full-time career appointment, exempt (monthly paid) from overtime pay.
This position may be subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
This position accommodates US-based remote or onsite work at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA.
Equal Employment Opportunity: Berkeley Lab is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or protected veteran status. Berkeley Lab is in compliance with the Pay Transparency Nondiscrimination Provision under 41 CFR 60-1.4. Click here to view the poster and supplement: "Equal Employment Opportunity is the Law."
Internal Number: 92675
About Lawrence Berkeley National Laboratory
In the world of science, Lawrence Berkeley National Laboratory (Berkeley Lab) is synonymous with excellence. Thirteen scientists associated with Berkeley Lab have won the Nobel Prize. Fifty-seven Lab scientists are members of the National Academy of Sciences (NAS), one of the highest honors for a scientist in the United States. Thirteen of our scientists have won the National Medal of Science, our nation's highest award for lifetime achievement in fields of scientific research. Eighteen of our engineers have been elected to the National Academy of Engineering, and three of our scientists have been elected into the Institute of Medicine. In addition, Berkeley Lab has trained thousands of university science and engineering students who are advancing technological innovations across the nation and around the world. Berkeley Lab is a member of the national laboratory system supported by the U.S. Department of Energy through its Office of Science. It is managed by the University of California (UC) and is charged with conducting unclassified research across a wide range of scientific disciplines. Located on a 200-acre site in the hills above the UC Berkeley campus that offers spectacular... views of the San Francisco Bay, Berkeley Lab employs approximately 4,200 scientists, engineers, support staff and students. Its budget for 2011 is $735 million, with an additional $101 million in funding from the American Recovery and Reinvestment Act, for a total of $836 million. A recent study estimates the Laboratory's overall economic impact through direct, indirect and induced spending on the nine counties that make up the San Francisco Bay Area to be nearly $700 million annually. The Lab was also responsible for creating 5,600 jobs locally and 12,000 nationally. The overall economic impact on the national economy is estimated at $1.6 billion a year. Technologies developed at Berkeley Lab have generated billions of dollars in revenues, and thousands of jobs. Savings as a result of Berkeley Lab developments in lighting and windows, and other energy-efficient technologies, have also been in the billions of dollars. Berkeley Lab was founded in 1931 by Ernest Orlando Lawrence, a UC Berkeley physicist who won the 1939 Nobel Prize in physics for his invention of the cyclotron, a circular particle accelerator that opened the door to high-energy physics. It was Lawrence's belief that scientific research is best done through teams of individuals with different fields of expertise, working together. His teamwork concept is a Berkeley Lab legacy that continues today.