Credential Administrator

Credential Administrator

IT Identity and Access Mgt

Full Time

Job Code: 86358

The IAM Credential Administrator plays a critical role in the oversight and management of user credentials across various systems and platforms. This mid‑senior level position is accountable for ensuring the secure and efficient provisioning, maintenance, and revocation of user credentials in accordance with institutional policies and regulatory requirements. The Credential Administrator will also play a key role in the design, implementation, and optimization of Badge login solutions to enhance secure authentication, single sign‑on (SSO), and identity governance.

The IAM Credential Administrator will partner closely with stakeholders to enhance credential management processes and provide support to UCSF’s Health, Education, and Research organizations.

The IAM Credential Administrator will positively impact UCSF’s operations and culture by ensuring UCSF’s IT infrastructure is operable, secure, efficient, and effective in service of the University’s mission. This team member will advance the University’s mission by delivering exceptional information technology services comprehensively and consistently across customers and stakeholders. This role will execute UCSF’s vision while modeling UCSF’s culture and values.

The final salary and offer components are subject to additional approvals based on UC policy. Your placement within the salary range is dependent on a number of factors including your work experience and internal equity within this position classification  annual salary range for this position is $113,800-$242,800. To learn more about the benefits of working at UCSF, including total compensation, please visit: (Use the "Apply for this Job" box below)..html

University of California, San Francisco (UCSF) is distinguished as a leading academic healthcare organization, home to groundbreaking discoveries, world‑class education, and exceptional healthcare services. Infrastructure Services (IS) is the backbone of the technological infrastructure, assuring the technical services that enable the academic, medical, and research missions of the organization. Beyond a focus on maintaining systems and resolving issues, we are committed to nurturing the potential of our team members and empowering them to excel.

UCSF Infrastructure Services provides 24×7 support to the University community, always upholding the highest level of responsiveness and reliability for our customers. IS values innovation and excellence in ensuring secure and efficient Information Technology (IT) services, regardless of the hour or complexity of the issue.

The Identity and Access Management Services team within Infrastructure Services protects UCSF’s resources through access management, including accounts, authentication, access, and role‑based provisioning at the enterprise level. This team implements rigorous regulation of UCSF data through granular access control and the auditing of all UCSF assets on the premises and in the cloud. By ensuring information security at UCSF, the IAM Services team enables the academic, medical, and research mission of UCSF.

• Bachelor’s degree or equivalent combination of experience/training in computer science, information technology, cybersecurity, or a related field.
• Five years or more of experience working in one or more of the following fields: IAM, cybersecurity, computer science, computer information systems, etc.
• Experience administering Microsoft Active Directory (AD) in a large, complex, multi-domain environment.
• Experience administering Imprivata One Sign or other identity/access management solutions in production for a large complex organization.
• Advanced knowledge of identity and access management concepts, including authentication, authorization, provisioning, and identity lifecycle management.
• Extensive proficiency in using IAM tools and platforms such as Okta, SailPoint, Microsoft Azure AD, Ping Identity, and others.
• Experience with directory services (e.g., Active Directory, LDAP), Single Sign-On (SSO) technologies, and…