Credential Administrator - Imprivata

The IAM Credential Administrator plays a critical role in the oversight and management of user credentials across various systems and platforms. This mid-senior level position is accountable for ensuring the secure and efficient provisioning, maintenance, and revocation of user credentials in accordance with institutional policies and regulatory requirements. The Credential Administrator will also play a key role in the design, implementation, and optimization of Badge login solutions to enhance secure authentication, single sign-on (SSO), and identity governance. The IAM Credential Administrator will partner closely with stakeholders to enhance credential management processes and provide support to UCSF's Health, Education, and Research organizations.

About UCSF

The University of California, San Francisco (UCSF) is a leading university dedicated to promoting health worldwide through advanced biomedical research, graduate-level education in the life sciences and health professions, and excellence in patient care. It is the only campus in the 10-campus UC system dedicated exclusively to the health sciences. We bring together the world's leading experts in nearly every area of health. We are home to five Nobel laureates who have advanced the understanding of cancer, neurodegenerative diseases, aging and stem cells.

Pride Values

UCSF is a diverse community made of people with many skills and talents. We seek candidates whose work experience or community service has prepared them to contribute to our commitment to professionalism, respect, integrity, diversity and excellence - also known as our PRIDE values.

In addition to our PRIDE values, UCSF is committed to equity - both in how we deliver care as well as our workforce. We are committed to building a broadly diverse community, nurturing a culture that is welcoming and supportive, and engaging diverse ideas for the provision of culturally competent education, discovery, and patient care. Additional information about UCSF is available here.

Join us to find a rewarding career contributing to improving healthcare worldwide.

Equal Employment Opportunity

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.

Salary Information

The final salary and offer components are subject to additional approvals based on UC policy.

Your placement within the salary range is dependent on a number of factors including your work experience and internal equity within this position classification at UCSF. For positions that are represented by a labor union, placement within the salary range will be guided by the rules in the collective bargaining agreement.

To learn more about the benefits of working at UCSF, including total compensation, please visit: https://ucnet.universityofcalifornia.edu/compensation-and-benefits/index.html

Required Qualifications

Bachelor's degree or equivalent combination of experience/training in computer science, information technology, cybersecurity, or a related field.Five years or more of experience working in one or more of the following fields: IAM, cybersecurity, computer science, computer information systems, etc.Experience administering Imprivata OneSign or other identity/access management solutions in production for a large complex organization.Experience integrating badge login solutions (e.g., Imprivata) with HER/EMR systems (Epic, Cerner), Citrix, VMware, and cloud IAM or similar platforms.Experience administering Microsoft Active Directory (AD) in a large, complex, multi-domain environment.Knowledge of directory services (e.g., Active Directory, LDAP), Single Sign-On (SSO) technologies, and multi-factor authentication (MFA) solutions.Advanced knowledge of identity and access management concepts, including authentication, authorization, provisioning, and identity lifecycle management.Extensive proficiency in using IAM tools and platforms such as Okta, SailPoint, Microsoft Azure AD, Ping Identity, and others.Strong PowerShell scripting skills.Broad knowledge of data encryption technologies and experience selecting and applying appropriate data encryption technologies.Excellent skills in diagnosing and resolving technical issues related to IAM systems and integrations.Extensive ability to manage IAM projects, including planning, execution, monitoring, and closing, ensuring timely delivery and adherence to scope and budget.Excellent written and verbal communication skills and ability to communicate complex technical ideas to a diverse community of colleagues and stakeholders. Can relay technical information to audiences of technical and non-technical stakeholders.Advanced ability to establish and advance positive working relationships and a strong rapport with a diverse community of colleagues including team members, stakeholders, and customers.Advanced organizational skills and ability to balance competing priorities and deliver concurrent projects to various stakeholder types. Experience working in a project-based environment using leading project management practices including schedule management, status reporting, and communication of project risks and issues.Advanced problem-solving skills; ability to uncover root of difficult problems and scope solutions based on knowledge of available resources and timelines as well as awareness of vision and strategy. Seeks information from multiple and diverse sources to inform solutions. Demonstrated ability to make decisions with integrity.Ability to think creatively and introduce innovations such as the incorporation of new technologies or processes. Thrives in an ever-changing, fast-paced environment.This position requires on-site work based on business needs. Also, we are not sponsoring any type of Visa''s.

Preferred Qualifications

Seven or more years of experience working in one or more of the following fields: IAM, cybersecurity, computer science, computer information system.Experience integrating badge login platforms (e.g., Imprivata) with HER/EMR systems (Epic, Cerner), Citrix, VMware, and cloud IAM platforms.Familiarity with zero-trust security models, privileged access management (PAM) and endpoint security.Understanding of healthcare IT regulations (HIPAA, HITRUST, NIST 800-53, etc.).Experience in complex higher education environments, serving academic, medical, and research and administrative functions of a large public university.One or more of the following certifications: Certified Identity and Access Manager (CIAM), Certified Access Management Specialist (CAMS), Microsoft Certified: Identity and Access Administrator Associate (SC-300), Cisco Certified Network Professional (CCNP) Security, Cisco Certified Internetwork Expert (CCIE) Security, Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or equivalent certification.