ANALYST, IT (Identity Management - DKU)
**This is a one year term position**POSITION SUMMARY
The Identity Management team provides authentication, authorization, and directory services to Duke University and Duke Health. Duke’s Identity Management system is comprised of homegrown and open source applications, and the team is primarily focused on engineering. This position reports to the Senior Manager of Identity Management within the Office of Information Technology.
DUTIES & WORK PERFORMED
- Develop, maintain and support Duke’s Identity Management System, including connections to source systems for identity data, processes to normalize person information, and attribute interfaces to provide that information to consumers across the University and Health System via LDAP, Active Directory, RESTful web services, and scheduled feeds.
- Support and develop enterprise authentication solutions via SAML2 and OAuth.
- Extend enterprise authorization management and develop functions to support self-service and automation on services pertaining to authentication, authorization, and account management.
- Team members (including this position) share an on-call rotation to provide Tier 4 support and periodic system maintenance oversight, including off hours.
- Strong candidates will share an interest in automating solutions to recurring issues requiring IT support at any tier.
The ideal candidate for this position would have the following qualifications:
- Strong programming skills, ideally in Java or Ruby
- Experience with contributing to team development projects, including tracking code changes in Git, submitting merge requests for code review, and following project workflows
- Comfort with deploying and debugging applications onto Linux systems running Apache
- Ability to interact with relational databases via SQL
- Familiarity with Docker
- Interest in authentication and authorization, including an ability to quickly cross-train on Shibboleth infrastructure and support
- Ability to identify, scope, and execute on opportunities for automation or improvement in system architecture
- Experience with LDAP or Active Directory
COMPETENCIES AND BEHAVIORS
We’re looking for the next member of our team to bring:
- Curiosity: interest in learning the ins and outs of Identity and Access Management at and beyond Duke. Enthusiasm about automation to ensure a steady stream of interesting new challenges.
Autonomy: ability to work with minimal oversight while investigating a problem and scoping out possible solutions.
Teamwork: knowing when it’s time to bring problems back to the team for help or a second opinion. Willingness to share insights and provide mentorship to other colleagues inside and outside of the team.
Commitment to quality: passion and active advocacy for best practices in software development and Identity and Access Management; refactoring or replacing code along the way for consistent, incremental improvement.
Connection to mission: services like single sign-on affect daily life at Duke University and Duke Health. We’re looking for a team member who believes it’s worth going the extra mile to make it easier for people in our community to access the services they need for work, research, and study. In addition to end user services, we provide tools for developers and other departmental contacts to integrate with our services. Help Duke meet business needs with security, convenience, and reliability.
Bachelor’s degree and 3-6 years relevant work experience, or equivalent combination of education and experience.
The Office of Information Technology (OIT) is responsible for managing Duke University’s IT infrastructure, service and support including academic research and enterprise applications. OIT provides leadership and expertise in many areas of Information Technology to Duke entities, including faculty, staff, and students. Specific services delivered include voice, data & video communications, institutional email and administrative applications (payroll, financial ledger, student systems etc.), database, web infrastructure, desktop & helpdesk support, student computing, data center services, and high-performance computing & academic software systems. OIT is also responsible for developing/upgrading the physical IT infrastructure around campus and maintaining 23 student computer labs.
OIT is a member of Educause, IVY Plus, National LambdaRail (NLR), and has representation at many of the leading technology consortiums that are driving the future growth and use of technology.
Duke University and Durham are located in the Research Triangle, a region that encompasses one of the nation's premier concentrations of academic, corporate, and public research. The Triangle region is rated among the most desirable areas in North America to live and work and has been identified by Money magazine as one of the "Best Places to Live" in the U.S.
Trustworthiness, respect, diversity, learning and teamwork are the hallmarks of Duke's guiding principles. Our accomplishments are dependent on the dedication and expertise of all who work to support Duke's mission.
Duke is an Affirmative Action/Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or veteran status.
Duke aspires to create a community built on collaboration, innovation, creativity, and belonging. Our collective success depends on the robust exchange of ideas—an exchange that is best when the rich diversity of our perspectives, backgrounds, and experiences flourishes. To achieve this exchange, it is essential that all members of the community feel secure and welcome, that the contributions of all individuals are respected, and that all voices are heard. All members of our community have a responsibility to uphold these values.
Essential Physical Job Functions: Certain jobs at Duke University and Duke University Health System may include essentialjob functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department.