Berkeley Lab's Information Technology (IT) Division has an opening for an Identity Management Engineer to join our Collaboration Services Group!
In this role, you will be responsible for monitoring, developing, documenting, and maintaining the performance of complex systems and creating scripts and applications to support operations. This role will serve as a member of the IT Collaboration Services Group and provide support to Berkeley Lab's institutional Identity Management Service (IDM). You will help build our capabilities to enable enterprise security and scientific collaboration using a combination of tools and technologies. This position will help manage systems and services from our own on-premises infrastructure; operate our growing array of cloud services, including IaaS, PaaS, and SaaS solutions; and work with scientific and enterprise groups across the Laboratory to implement identity solutions for their services.
What You Will Do:
Keep existing software, services, and operating systems up-to-date and running with high availability. Our systems provide access to and support virtually every business and collaboration system at the Laboratory, including our financial, HR, and G Suite services.
Collaborate with members of the Laboratory community directly and with their vendors to integrate our identities with their applications.
Develop, enhance, and customize custom-developed and third-party software used in our environment.
Continue the migration of our existing application base from standalone processes and Docker containers to container orchestration solutions.
Work with the cybersecurity team to ensure that our identity solutions are enhancing the security of Laboratory systems and services.
Evangelize identity management services throughout the Laboratory community by demonstrating technical competence in these areas and providing excellent customer service.
Participate in the conception, planning, implementation and support of new services and capabilities.
Provide tier II support for LBNL's G Suite services by interfacing with G Suite support for technical issue resolution.
What is Required:
Bachelor's Degree or equivalent training/experience and a minimum of 4 years of related professional experience or an equivalent combination of education and experience.
Experience integrating diverse information/directory systems with homegrown solutions; well-versed in scripting from whole-cloth as well as extending existing solutions.
Experience with the deployment and support of web servers and web services, such as Apache httpd, Apache Tomcat, Jetty, and NodeJS with Express.
Hands-on experience with web single sign-on solutions, especially SAML and OpenID Connect, with specific experience with the Shibboleth Identity Provider.
Knowledge and experience with directory services such as OpenLDAP and Active Directory.
Understanding of multifactor authentication with OATH OTP tokens, U2F/WebAuthn/FIDO2, and PKI/smart cards.
Deep understanding of web protocols, especially web session handling.
Working knowledge of relational database management systems such as Oracle, MS SQL Server, and MySQL.
Excellent troubleshooting skills with the ability to work on and resolve complex technical issues.
What We Desire:
Advanced degree in Electronics Engineering, Computer Science, Computer Systems Technology.
Experience in a research environment or a customer service delivery organization.
The posting shall remain open until the position is filled.
This is a full time, M-F, exempt from overtime pay (monthly paid), Career appointment.
Salary is commensurate with experience.
This position may be subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
Typically work will be performed at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA, however, this position has the option of working remotely, but is limited to individuals residing within the United States.
Learn About Us:
Berkeley Lab (LBNL) addresses the world's most urgent scientific challenges by advancing sustainable energy, protecting human health, creating new materials, and revealing the origin and fate of the universe. Founded in 1931, Berkeley Lab's scientific expertise has been recognized with 13 Nobel prizes. The University of California manages Berkeley Lab for the U.S. Department of Energy's Office of Science.
Working at Berkeley Lab has many rewards including a competitive compensation program, excellent health and welfare programs, a retirement program that is second to none, and outstanding development opportunities. To view information about the many rewards that are offered at Berkeley Lab- Click Here.
Equal Employment Opportunity: Berkeley Lab is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or protected veteran status. Berkeley Lab is in compliance with thePay Transparency Nondiscrimination Provisionunder 41 CFR 60-1.4. Clickhere to view the poster and supplement: "Equal Employment Opportunity is the Law."
Lawrence Berkeley National Laboratory encourages applications from women, minorities, veterans, and other underrepresented groups presently considering scientific research careers.
Internal Number: 87174
About Lawrence Berkeley National Laboratory
In the world of science, Lawrence Berkeley National Laboratory (Berkeley Lab) is synonymous with excellence. Thirteen scientists associated with Berkeley Lab have won the Nobel Prize. Fifty-seven Lab scientists are members of the National Academy of Sciences (NAS), one of the highest honors for a scientist in the United States. Thirteen of our scientists have won the National Medal of Science, our nation's highest award for lifetime achievement in fields of scientific research. Eighteen of our engineers have been elected to the National Academy of Engineering, and three of our scientists have been elected into the Institute of Medicine. In addition, Berkeley Lab has trained thousands of university science and engineering students who are advancing technological innovations across the nation and around the world. Berkeley Lab is a member of the national laboratory system supported by the U.S. Department of Energy through its Office of Science. It is managed by the University of California (UC) and is charged with conducting unclassified research across a wide range of scientific disciplines. Located on a 200-acre site in the hills above the UC Berkeley campus that offers spectacular... views of the San Francisco Bay, Berkeley Lab employs approximately 4,200 scientists, engineers, support staff and students. Its budget for 2011 is $735 million, with an additional $101 million in funding from the American Recovery and Reinvestment Act, for a total of $836 million. A recent study estimates the Laboratory's overall economic impact through direct, indirect and induced spending on the nine counties that make up the San Francisco Bay Area to be nearly $700 million annually. The Lab was also responsible for creating 5,600 jobs locally and 12,000 nationally. The overall economic impact on the national economy is estimated at $1.6 billion a year. Technologies developed at Berkeley Lab have generated billions of dollars in revenues, and thousands of jobs. Savings as a result of Berkeley Lab developments in lighting and windows, and other energy-efficient technologies, have also been in the billions of dollars. Berkeley Lab was founded in 1931 by Ernest Orlando Lawrence, a UC Berkeley physicist who won the 1939 Nobel Prize in physics for his invention of the cyclotron, a circular particle accelerator that opened the door to high-energy physics. It was Lawrence's belief that scientific research is best done through teams of individuals with different fields of expertise, working together. His teamwork concept is a Berkeley Lab legacy that continues today.