Identity (IAM) and Collaboration Platform System Integration Engineer

Department Marketing Statement:

There is a reason UCSB has been named the Best Place to Work by our local media for several years running. Whether our employees are on our stunning campus, or working remotely or hybrid, they tell us they value the flexibility, stability and rich benefits we offer. Come join us as we support the mission of one of the finest public institutions in the nation. UC Santa Barbara is consistently recognized for excellence across broad fields of study. Set alongside the glorious California coast, our dynamic environment inspires scholarly ambition and creativity. Information Technology Services (ITS), the Campus' central IT unit, contributes to UC Santa Barbara's mission of research, teaching, and community service by partnering with the Campus community to efficiently deliver IT infrastructure and enterprise application services to faculty, students, staff, and affiliates. Join us in supporting the technology making world class research possible!

Benefits of Belonging:

Working at UC means being part of this vibrant institution that shines a light on what is possible. People make UC great, and UC recognizes your contributions by making this a great place to work. Excellent retirement and health are just one of the rewards. Learn more about the benefits of working at UC and why You Belong at UC.

Brief Summary of Job Duties:

Under general supervision, The Identity (IAM) and Collaboration Platform System Integration Engineer is responsible for designing, engineering, and managing the full lifecycle of secure and efficient identity and access management (IAM) solutions across the organization; this includes managing user identities, access controls, and integrates authentication systems to ensure data security and compliance with industry standards and regulations. The engineer also provides engineering analysis for complex identity integrations within collaboration platforms, primarily focusing on the Identity aspect of Google Workspace (Google Cloud Directory) and Microsoft 365 (Entra ID). This role requires a strong understanding of system integration principles, collaboration platforms, and IAM systems and the ability to integrate them seamlessly with other IT systems and applications. The role also performs technical consultation with other ITS and campus units to define requirements and perform effectiveness analyses for applications relying on this infrastructure. Due to the mission-critical nature of these services, the position will require occasional work outside of regular business hours and the need to be on call.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field or equivalent experience.
• 1-3 years: Strong understanding of IAM concepts, tools (e.g., Okta, Azure EntraID, AWS IAM), and technologies (e.g., identity providers, directory services, access control models).
• 1-3 years: Experience in system integration technologies (e.g., APIs, connectors, ETL tools), with a strong focus on IAM integrations.
• 1-3 years: Experience with scripting languages (e.g., Python, PowerShell), Infrastructure as Code (e.g., Terraform Cloudformation, CDK), Configuration Management (e.g., Ansible), and potentially low-code/no-code integration platforms.
• 1-3 years: Knowledge of security best practices and compliance standards (e.g., NIST, ISO 27001).

Preferred Qualifications:

• 1-3 years: Relevant industry certifications (e.g., CISSP, CISM, CISA, relevant cloud certifications).
• 1-3 years: Experience with cloud-based IAM solutions and integrations (e.g., AWS, Google, Microsoft EntraID, Okta).
• 1-3 years: Experience with observability and security information and event management (SIEM) systems.
• 1-3 years: Experience with Agile development methodologies Preferred
• Identity and Access Management (IAM): strong understanding of identity and access management concepts, tools (e.g., Ping Directory, Google Directory, Azure Entra ID, AWS IAM, Okta), and standard protocols (e.g., SAML, OIDC, SCIM), including authentication, authorization, single sign-on, multi-factor authentication, and access control models.
• System Integration: a deep understanding of system integration principles, methodologies, and best practices (e.g., APIs, connectors, ETL tools, integration platforms).
• Collaboration Platforms: in-depth knowledge of Google Workspace and Microsoft 365 suites, including their features, functionalities, and limitations.
• Cloud Computing: familiarity with cloud computing concepts and technologies (e.g., IaaS, PaaS, SaaS, cloud security).
• Security Best Practices: Knowledge of security best practices and compliance standards (e.g., NIST Cybersecurity Framework, ISO 27001, GDPR, CCPA).
• Development Skills: proficiency in version control systems (e.g., Git) and scripting languages (e.g., Python, PowerShell).
• Development Skills: experience with API development and integration (e.g., REST, GraphQL, SOAP, ETL).
• DevOps Skills: proficiency in Infrastructure-as-Code and Configuration Management concepts and tools (e.g., Terraform, Cloudformation, CDK, Ansible) and CI/CD workflows.
• DevOps Skills: experience with Observability and Monitoring platforms (e.g., Datadog, Splunk, AWS Cloudwatch) and practices
• Problem-solving: ability to analyze and troubleshoot complex problems, identify root causes, and develop effective solutions.
• Analytical Skills: analyzing data, identifying trends, and making informed decisions.
• Adaptability: ability to adapt to new technologies and changing business requirements.
• Proactive: ability to proactively identify and address potential issues.
• Attention to detail: meticulous attention to detail and accuracy in all aspects of work.

Special Conditions of Employment:

• Satisfactory conviction history background check
• UCSB is a Tobacco-Free environment
• Visa sponsorship is not available for this position.

Misconduct Disclosure Requirement:

As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer.

"Misconduct" means any violation of the policies governing employee conduct at the applicant's previous place of employment, including, but not limited to, violations of policies prohibiting sexual harassment, sexual assault, or other forms of harassment, or discrimination, as defined by the employer. For reference, below are UC's policies addressing some forms of misconduct:

• UC Sexual Violence and Sexual Harassment Policy
  
• UC Anti-Discrimination Policy
  
• Abusive Conduct in the Workplace

Job Functions and Percentages of Time:

35% Platform and System Management

• Engineer and manage the lifecycle of IAM platforms and technologies.
• Design and implement automated user provisioning, de-provisioning, and lifecycle events.
• Develop, implement, and integrate authentication systems (e.g., single sign-on, multi-factor authentication).
• Perform functional analysis to design and engineer authorization mechanisms (e.g., access control lists, attribute-based access control, role-based access control, least privilege).
• Perform technical risk assessments to ensure the security and compliance of IAM and collaboration platforms and their integrations.
• Engineer and implement Observability tools to perform system optimization and ensure platform performance and availability.

35% Support and Documentation

• Provide engineering analysis for complex system integration incidents related to Identity and Collaboration services, including SSO, Google Workspace, and campus identity provisioning.
• Coordinate with Tier 1 and Tier 2 support to identify common support issues.
• Collaborate closely with other IT teams (e.g., network, security, application development, database) to ensure successful integration and operation of IAM solutions.
• Maintain comprehensive documentation of IAM and collaboration platforms, integrations, and processes, including technical specifications, user guides, and run books.

30% Platform Integration

• Design and implement complex, multi-system integrations between IAM systems (e.g., identity providers, directory services, access management platforms) and other IT systems (e.g., HR systems, CRM, ERP, cloud platforms).
• Develop and maintain integration interfaces using APIs, connectors, and other technologies.
• Perform complex troubleshooting and validation to resolve integration issues related to data flow, connectivity, and authentication/authorization.
• Ensure data quality and accuracy during data exchange between systems.
• Identify and implement opportunities to improve the IAM and Collaboration platforms' performance, reliability, and user experience.
• Stay current on the latest features and updates to IAM platforms and toolsets.
• Research, prototype, and perform effectiveness analyses on new IAM or collaboration technologies and tools.

UC Vaccination Programs Policy:

As a condition of employment, you will be required to comply with the University of California Policy on Vaccinations Programs.

As a condition of Physical Presence at a Location or in a University Program, all Covered Individuals* must participate in any applicable Vaccination Program by providing proof that they are Up-to-Date with any required Vaccines or submitting a request for Exception in a Mandate Program or properly declining vaccination in an Opt-Out Program no later than the Compliance Date (Capitalized terms in this paragraph are defined in the policy.). Federal, state, or local public health directives may impose additional requirements.

For more information, please visit University of California Policy on Vaccinations - https://policy.ucop.edu/doc/5000695/VaccinationProgramsPolicy

*Covered Individuals: A Covered Individual includes anyone designated as Personnel or Students under this Policy who physically access a University Facility or Program in connection with their employment, appointment, or education/training. A person accessing a Healthcare Location as a patient, or an art, athletics, entertainment, or other publicly accessible venue at a Location as a member of the public, is not a Covered Individual.

Equal Employment Opportunity:

UC Santa Barbara is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other protected status under state or federal law.

Reasonable Accommodations:

The University of California endeavors to make the UCSB Job site (https://jobs.ucsb.edu) accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Katherine Abad in Human Resources at 805-893-4664 or email katherine.abad@hr.ucsb.edu. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Privacy Notification Statement:

Privacy Notification Statement and Notice of Availability of the UCSB Annual Security Report Disclosures

Payroll Title: SYS INTEGRATION ENGR 3 TX (005300)

Job Code: 005300

Job Open Date: 2/19/26

Application Review Begins: 3/6/26; open until filled

Department Code (Name): IDCL (IDENTITY & CLOUD SERVICES)

Percentage of Time: 100

Union Code (Name): TX - Technical Professionals

Employee Class (Appointment Type): Staff: Career

FLSA Status: Exempt

Classified Indicator Description (Personnel Program): PSS

Salary Grade: 227

Pay Rate / Range: The budgeted salary range that the University reasonably expects to pay for this position is $109,920-$139,600/yr. Salary offers are determined based on final candidate qualifications and experience; the budget for the position; and the application of fair, equitable, and consistent pay practices at the University. The full salary range for this position is $97,200-$182,000/yr.

Work Location: Onsite (SAASB, 4th Floor), Hybrid (SAASB, 4th Floor), or Remote

Working Days and Hours: M-F; 8am - 5pm

Benefits Eligibility: Full Benefits

Type of Remote or Hybrid Work Arrangement, if applicable: Hybrid or Remote Eligible

Special Instructions:
For full consideration, please include a resume and a cover letter as part of your application.

Application Status: If you would like to check the status of your application, please log into the Candidate Gateway where you applied and click on 'my activities'.