IAM ENGINEER

Req #:	197587
Department:	UW INFORMATION TECHNOLOGY
Appointing Department Web Address:	http://www.washington.edu/uwit/employment/
Job Location:	Seattle Campus
Posting Date:	08/04/2022
Closing Info:	Open Until Filled
Salary:	Salary is commensurate with experience and education.
Shift:	First Shift
Notes:	As a UW employee, you will enjoy generous benefits and work/life programs. For detailed information on Benefits for this position, click here.

As a UW employee, you have a unique opportunity to change lives on our campuses, in our state and around the world. UW employees offer their boundless energy, creative problem solving skills and dedication to build stronger minds and a healthier world.

UW faculty and staff also enjoy outstanding benefits, professional growth opportunities and unique resources in an environment noted for diversity, intellectual excitement, artistic pursuits and natural beauty.

The UW Information Technology (UW-IT) has an outstanding opportunity for a IAM Engineer! UW Information Technology is the central information technology organization for the University of Washington, responsible for strategic planning, oversight, and direction of the UWs IT infrastructure, resources, and services. UW-IT provides critical technology support to all three campuses, UW medical centers, and research operations around the world. UW-IT partners with the UW community to enable innovation, learning, discovery, and service.

IT Infrastructure (ITI) division of UW-IT delivers the technology infrastructure required to sustain UW as a leading research, teaching, learning, and medical institution. These technologies support the UWs core mission at all levels research, teaching, learning, healthcare, and the necessary underlying administrative and operational functions required to deliver these services. ITI infrastructure supports all three UW campuses (Seattle, Bothell, and Tacoma), UW Medicine (medical centers and clinics), the state K-20 Education Network (300+ school districts), and the Pacific Northwest Gigapop (research & education networks throughout the PNW and Pacific Rim). ITI designs, builds, and operates technology infrastructure services including networks, computing & storage solutions, data centers, telecommunications services, identity & access management, and the infrastructure tools required to operate, integrate, and report on these services.

The IAM Engineer provides technical support of the Identity and Access Management (IAM) program administered by UW Information Technology (UW-IT). The Identity and Access Management (IAM) program within ITI is responsible for critical infrastructure and IT services for identity registration and administration, account and credential management (e.g. UW NetIDs), authentication and single sign-on, access control and administration, and participation in national and global federations (e.g. InCommon, eduroam), all in support of institutional needs for identity, privacy, security, accountability, transparency, efficiency, and cost-effective management of institutional risk. This position designs, develops, integrates, and operates IAM services including custom-built, open source, and vendor products such as: UW Identity Registry, UW NetID (accounts and passwords), Kerberos (MIT, Microsoft), SAML Identity Provider (Shibboleth), Multi-Factor Authentication (Duo), RADIUS authentication, UW Groups (Internet2 Grouper Toolkit), ASTRA (privilege/role management system), Directory Services (OpenLDAP), Certificate Authority services (UW CA, InCommon CA), and Microsoft Infrastructure (including ADFS and Azure AD). These are trusted, common good services relied upon by the UWs enterprise portfolio of IT services and business applications.

A day in the life:

Start the morning off by catching up on email and slack for incoming alerts, requests and status reports from cron jobs.

Continue monitoring email and slack throughout the day, responding to requests that might trickle in from campus and/or UW-IT groups with specific needs. Solutions may include collecting data from the Identity Registry tables or various system logs and producing reports. Depending on their general usefulness these reports may wind up as permanent fixtures that you then automated to run regularly making their results available to larger sets of people or incorporated as enhancements to existing utilities or packages.

Attend project team meetings and/or stand-ups to report largish tasks and/or discover additional tasks to be done.

Develop new tools, utilities, and workflows or enhance existing tools, utilities, and workflows. Push updates to GitHub.

Submit pull requests soliciting peer review from other IAM or greater UW-IT team members.

Perform peer review on GitHub pull requests from other IAM or greater UW-IT team members.

Develop documentation for the procedures and utilities you generate or find lacking documentation of their own.

Field on-call alerts when a mission critical service youre responsible for detects a problem with the network or other APIs it communicates with.

This position also collaborates with peers and others to improve practices, processes, and tools for software development, testing, and versioning, continuous integration, automated release and deployment of service changes, and operations and monitoring.

REQUIREMENTS

Bachelors Degree in computer science or a related field or equivalent experience.

Four years' experience performing progressively more complex and responsible tasks involving development and operations of enterprise software applications and services.

Experience designing, building, and maintaining modular and reliable applications written in the C programming language.

Experience with source code management and tools like GitHub.

Familiar with scalable and reliable software systems.

Familiar with secure design and coding practices.

Familiar with Linux.

Familiar with other object-oriented languages like Python.

Demonstrated excellent written and verbal communication and technical documentation skills and user interaction abilities.

Strong interpersonal skills and ability to work effectively in a matrix organization.

Demonstrated ability to quickly learn and apply new technologies and skills.

Demonstrated ability to work independently with minimal supervision.

An effective team player who enjoys collaboration.

Equivalent education/experience will substitute for all minimum qualifications except when there are legal requirements, such as a license/certification/registration.

DESIRED:

Experience in DevOps practices.

Experience with cloud platforms like GCP, AWS, and/or Azure.

Experience with Docker containers and Kubernetes.

Experience consuming and/or implementing RESTful APIs.

Experience developing frontend web applications using Javascript frameworks like Angular or React.

Familiar with continuous integration tools like GitHub Actions.

Familiar with server configuration and build automation tools like Ansible.

Familiar with relational and/or NoSQL databases like PostgreSQL and Elasticsearch.

Familiar with messaging services like Amazon SNS/SQS.

Familiar with large scale technical projects in large, complex environments.

Knowledge of TCP/IP networking concepts and related technologies like TLS and load balancers.

Knowledge of IAM technologies used in research and education communities like RADIUS, Shibboleth, Grouper, midPoint, SAML, OIDC, InCommon, eduGAIN, eduPerson, and ORCID.

Familiar with IAM capabilities (e.g. identity registration, credential management, access governance, provisioning, authentication, single sign-on, federation).

Knowledge of software test methodologies and automation tools.

Familiar with open source software development.

Experience in a major research University setting.

WORK ENVIORNMENT:

Working conditions include typical office environments and university data centers.

Hybrid office environment.

May need to respond to service incidents, outages, and respond to customer questions on a priority/urgency basis.

The IAM Engineer may need to respond to service incidents, outages, and respond to customer questions on a priority/urgency basis.

The IAM Engineer may need to work varied hours to meet priority project milestones and other externally imposed deadlines and to accomplish work assignments on which the activities of others depend.

Occasional travel may be required.

The same levels where applicable of participation are required in a remote work environment.

Position participates in an on-call rotation and must be able to respond to outages during off-hours

Under Gov. Inslees proclamation, full COVID-19 vaccination became a condition of employment at the University of Washington effective Oct. 18, 2021.

Application Process:
The application process for UW positions may include completion of a variety of online assessments to obtain additional information that will be used in the evaluation process. These assessments may include Work Authorization, Cover Letter and/or others. Any assessments that you need to complete will appear on your screen as soon as you select Apply to this position. Once you begin an assessment, it must be completed at that time; if you do not complete the assessment you will be prompted to do so the next time you access your My Jobs page. If you select to take it later, it will appear on your "My Jobs" page to take when you are ready. Please note that your application will not be reviewed, and you will not be considered for this position until all required assessments have been completed.

Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.

Committed to attracting and retaining a diverse staff, the University of Washington will honor your experiences, perspectives and unique identity. Together, our community strives to create and maintain working and learning environments that are inclusive, equitable and welcoming.