Manager, Identity Administration and Engineering (0521U) Berkeley IT, #88282

At the University of California, Berkeley, we are dedicated to fostering a community where everyone feels welcome and can thrive. Our culture of openness, freedom, and belonging makes it a special place for students, faculty, and staff, who are among the most talented and accomplished anywhere, including Nobel laureates, Pulitzer Prize winners, and MacArthur Fellows. Since our founding in 1868, we have been an engine for innovation - driving intellectual, economic, and social progress that benefits California, the U.S., and beyond. Together, we change the world.

At Berkeley, the best careers are built on a foundation of continuous learning and growth. We actively support professional development by providing all full-time staff employees with at least 80 hours of paid time per year and provide space for supportive colleague communities via numerous employee resource groups.

We invite applicants who are inspired by our Principles of Community and who are eager to be part of our exciting Strategic Plan, which charts Berkeley's next era of excellence.

Learn more about some of our accomplishments at Points of Pride.

Departmental Overview

The Information Security Office (ISO) coordinates the risk management process for UC Berkeley's information systems and directs campus-wide efforts to adequately secure Institutional data. ISO is led by the Chief Information Security Officer and consists of seven areas: Information Security Policy, Information Security Operations, Information Security Engineering, Identity and Access Management, Information Security Assessments, Outreach and Engagement, and Service Management.

Position Summary

The Manager, Identity Administration and Engineering leads the engineering and operational support of the campus enterprise Identity and Access Management (IAM) infrastructure. This position is responsible for ensuring the reliability, performance, and security of IAM platforms that enable access management, and service integrations across campus IT systems. The Manager, Identity Administration and Engineering works closely with the Developer and Production Support teams to optimize DevOps processes and drive continuous process improvement across IAM operations. This position works on complex technical issues involving system architecture and design, implementation, and optimization of IAM solutions under the guidance of the Manager, Identity and Access Management. Additionally, the Manager, Identity Administration and Engineering serves as the technical lead and supervisor of the Identity Administration and Engineering team, ensuring operational excellence and implementing new solutions to meet evolving campus needs.

Application Review Date

The First Review Date for this job is: 9/8/2026

Responsibilities

Enterprise Architecture, Engineering & System Leadership - 40%

• Leads the analysis, architecture, engineering, implementation, and administration of campus enterprise Identity and Access Management (IAM) infrastructure, services, and underlying systems, from conception through deployment and ongoing operations.
• Directs and implements highly complex IAM solutions, system enhancements, integrations, software and hardware configurations, upgrades, and deployments ensuring alignment with campus IT strategies and technology roadmaps.
• Provides advanced technical expertise and recommendations for IAM infrastructure purchases, upgrades, and system improvements including evaluation and selection input, that impact the reliability, scalability, and performance of campus authentication and access management services.
• Serves in a senior advisory / consultative role for major campuswide IT projects and initiatives involving the development of or integration with IAM (CalNet) services providing architectural guidance, system integration expertise, and strategic technical recommendations.
• Develops and maintains automation, scripting, and systems management solutions supporting IAM operations and service reliability.

IAM Systems Administration & Technical Team Leadership - 35%

• Supervises staff responsible for IAM (CalNet) Systems Administration and Engineering, and plans and leads day-to-day IAM systems administration and engineering activities (service requests, troubleshooting, operational work assignments, etc), including prioritization and oversight of work to ensure effective service delivery.
• Provides hands-on technical support for day-to-day operations, including direct handling of complex service requests, incidents, and escalations to ensure timely resolution and maintain service quality across enterprise authentication and access management platforms.

Strategic Collaboration & Operational Maturity - 10%

• Supports the Senior Manager, Identity and Access management in partnering with relevant campus stakeholders to ensure shared objectives are achieved.
• Interacts with other campus departments to implement, advise, plan, build, test, and launch improvements to enterprise IAM services and solutions, including enhancements to operational maturity and service delivery.

Security, Compliance & Enterprise Policy Support - 10%

• Ensures IAM service compliance with campus and systemwide information security policies, standards and procedures, and campus standards and procedures for enterprise IT architecture.

Professional Development and Training - 5%

• Engages in professional development and training to maintain expertise in identity and access management, information security, and related technologies.
• Contributes to departmental initiatives, continuous improvement efforts, and special projects, and performs other duties as assigned.

Required Qualifications

• Experience overseeing technical staff.
• Strong experience with the following technologies: Multi-factor authentication, IAM technologies including SAML federations, Microsoft platforms (Server 2025, 2022, Active Directory and Group Policy), Unix/Linux, LDAP, DNS, SMTP, Web Services, Relational Database Systems, Java Enterprise Edition platform and services.
• Demonstrated experience with process analysis, systems analysis, process architecture, and various SDLC methodologies and practices.
• Strong understanding of software, applications, database infrastructure, and other IT functions.
• Familiarity with IAM in the higher education space, for example hands on experience with the InCommon Trusted Access Platform, specifically Shibboleth and Grouper and/or the ability to learn.
• Expertise relating to the design and development of information technology architectures across the organization.
• Demonstrated ability to effectively communicate with executive-level management on a regular basis.
• Demonstrated effective communication and interpersonal skills, including the ability to communicate technical information to technical and non-technical personnel at various levels in the organization.
• Ability to understand business needs and how business systems can support those needs.
• Demonstrates problem solving skills.
• Enterprise-level understanding of and experience with key modeling and description languages used to map highly complex business processes to architectural components, develop common, large-scale data resource architectures, and create reference frameworks.
• Significant experience with the integration of highly complex, diverse, internally and externally developed implementations of business functions to build enterprise-class, scalable systems.
• Demonstrated ability to work with others from diverse backgrounds.
• Demonstrated commitment to the advancement of diversity, equity, inclusion, belonging, and justice at UC Berkeley and Berkeley IT and/or the ability to learn.

Preferred Qualifications

• Expert knowledge of information management, and campus / medical center / OP business processes and strategic goals and/or the ability to learn.
• Skills in web software, web software language and object oriented software concepts.
• Demonstrated ability to translate business needs into long-term architecture solutions.
• Experience working with multi-lateral federations in a research environment.
• Familiarity with cloud-based identity platforms, for example Okta or Entra ID.

Education / Training

• Bachelor's degree in related area and / or equivalent experience / training

Salary & Benefits

For information on the comprehensive benefits package offered by the University, please visit the University of California's Compensation & Benefits website.

Under California law, the University of California, Berkeley is required to provide a reasonable estimate of the compensation range for this role and should not offer a salary outside of the range posted in this job announcement. This range takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to experience, skills, knowledge, abilities, education, licensure and certifications, analysis of internal equity, and other business and organizational needs. It is not typical for an individual to be offered a salary at or near the top of the range for a position. Salary offers are determined based on final candidate qualifications and experience.

The budgeted annual range that the University reasonably expects to pay for this position is $128,400.00 - $200,000.00.

• This is an exempt, monthly-paid position.
• This is a full-time (40 hours/week) Career position eligible for UC benefits.

How to Apply

To apply, please submit your resume and cover letter.

Other Information

• This position is eligible for up to 5 days/ week remote work. Exact arrangements are determined in partnership with your supervisor to meet role responsibilities and department needs and are subject to change.
• This is not a visa opportunity. This position also does not include sponsorship of a new consular H-1B visa petition that would require payment of the $100,000 supplemental fee.

Conviction History Background

This is a designated position requiring fingerprinting and a background check due to the nature of the job responsibilities. Berkeley does hire people with conviction histories and reviews information received in the context of the job responsibilities. The University reserves the right to make employment contingent upon successful completion of the background check.

Misconduct

As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer.

"Misconduct" means any violation of the policies or laws governing conduct at the applicant's previous place of employment, including, but not limited to, violations of policies or laws prohibiting sexual harassment, sexual assault, or other forms of harassment, discrimination, dishonesty, or unethical conduct, as defined by the employer. For reference, below are UC's policies addressing some forms of misconduct:

UC Sexual Violence and Sexual Harassment Policy

UC Anti-Discrimination Policy

Abusive Conduct in the Workplace

Equal Employment Opportunity

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.