Systems Administrator

Position Number: 40035429

Payroll Title: SYS ADM 3 TX (004699)

Job Code: 004699

Job Open Date: 10/16/26

Application Review Begins: 11/2/26

Department Code (Name): ENGR (DEAN COLLEGE OF ENGINEERING)

Percentage of Time: 100

Union Code (Name): TX - Technical Professionals

Employee Class (Appointment Type): Staff: Career

FLSA Status: Exempt

Classified Indicator Description (Personnel Program): PSS

Salary Grade: STEPS

Pay Rate/Range: The budgeted salary range that the University reasonably expects to pay for this position is $101,614.83 to $111,742.79/year. Salary offers are determined based on final candidate qualifications and experience; the budget for the position; and the application of fair, equitable, and consistent pay practices at the University. The full salary range for this position is $101,614.83 to $167,219.12/year.

Work Location: Engineering 2, Room 3328

Working Days and Hours: Mon-Fri; 8am-5pm, plus some after hours work

Benefits Eligibility: Full Benefits

Type of Remote or Hybrid Work Arrangement, if applicable: Hybrid (Both UC & Non-UC locations)

Special Instructions:

For full consideration, please include a resume and a cover letter as part of your application.

Department Marketing Statement:

The Engineering Computing Infrastructure (ECI) unit provides a broad range of Information Technology services, instructional technologies/facilities, and technical support services to all departments and research units in the College of Engineering at the University of California, Santa Barbara. The College comprises seven academic departments: Biological Engineering, Chemical Engineering, Computer Science, Electrical & Computer Engineering, Materials Science, Mechanical Engineering, and Technology Management. In addition, the College hosts a large number of research centers, institutes, and academic programs such as Institute of Energy Efficiency, Solid State Lighting and Energy Electronics Center, and OASIS. A complete list of research centers hosted/co-hosted in the College can be found at: https://engineering.ucsb.edu/research/research-centers

Benefits of Belonging

Working at UC means being part of this vibrant institution that shines a light on what is possible. People make UC great, and UC recognizes your contributions by making this a great place to work. Excellent retirement and health are just one of the rewards. Learn more about the benefits of working at UC

Brief Summary of Job Duties:

Seasoned experienced technical systems infrastructure professional for hardware, operating systems, and network management. Independently performs the full range of responsibilities and possesses broad job knowledge and in-depth understanding of systems administration. Defines, designs and implements systems services and technology solutions. Proposes and implements systems enhancements such as software, hardware, network configuration, updates, and installations for projects and complex services. Evaluates new technologies providing cost/benefit analyses and makes recommendations. Writes complex scripts. Designs, deploys, and manages complex services used by other technical professionals in the College. May be asked to give presentations of services provided and consult/mentor college professionals on how to best utilize the service provided. Work involves central College of Engineering Infrastructure, Instructional computing design, programming, support, departmental computer systems, and networks. Includes web-based systems administration and internal/external technical documentation. Technology is always changing as do the solutions provided. This job requires a willingness to continue technical skill development through independent and/or formal education. In a large, complex, and heterogeneous computing environment as part of an infrastructure, instructional, research and department services group, supports over 400 desktop systems, 300 instructional lab systems, 75 virtual machines, 15 collegewide servers, and 6,000 LDAP accounts. Accounts have personal and departmental websites for students, staff, faculty, and researchers. Service area covers 8+ buildings, the off-campus OASIS building, and multiple trailers across campus including the College of Engineering Machine Shop. Duties include, but are not limited to, designing, programming, implementing, administering, supporting, and enhancing services/systems used by college constituencies. Includes diagnosing/analyzing hardware, software, security, network problems, and performing maintenance. Supports: client and server hardware, software, installation and configuration of desktop and server operating systems (All versions of Linux, Windows, OS X), script writing to perform system maintenance, administration, and configuration. Server support for centralized infrastructure services. Maintains current knowledge of and acts as support for all production and research systems managed by ECI. Ensures the highest possible level of uptime for all services and systems.

Required Qualifications:

• Bachelor's Degree in Computer Science/Electrical Engineering or related field

• 4-6 years Demonstrated experience writing and editing scripts of moderate complexity used to perform system maintenance and administration

Preferred Qualifications:

• Ability to elicit and communicate technical and non-technical information in a clear and concise manner.
• Self-motivated and works independently and as part of a team.
• Demonstrates problem-solving skills.
• Able to learn effectively and meet deadlines.
• Basic knowledge of how to apply technologies and systems to meet business needs.
• Ability to write technical documentation in a clear and concise manner.
• Understanding of system performance monitoring and actions that can be taken to improve or correct performance.
• Knowledge of the design, development and application of technology and systems to meet business needs.
• General knowledge of other areas of information technology.
• Demonstrated understanding of how system management actions affect users and dependent/related functions.
• Demonstrated knowledge of computer security best practices and policies.

Special Conditions of Employment:

• Satisfactory criminal history background check
• Required to hold a valid driver's license, have a driving record that is in accordance with local policies and procedures, and/or enroll in the California Employer Pull Notice Program.
• UCSB is a Tobacco-Free environment

Misconduct Disclosure Requirement:

As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer.

"Misconduct" means any violation of the policies governing employee conduct at the applicant's previous place of employment, including, but not limited to, violations of policies prohibiting sexual harassment, sexual assault, or other forms of harassment, or discrimination, as defined by the employer. For reference, below are UC's policies addressing some forms of misconduct:

UC Sexual Violence and Sexual Harassment Policy
UC Anti-Discrimination Policy
Abusive Conduct in the Workplace

Job Functions and Percentages of Time:

• 40% Systems Administration - In a large, complex, and heterogeneous computing environment as part of an infrastructure, instructional, research and department services group, supports over 400 desktop systems, 300 instructional lab systems, 75 virtual machines, 15 collegewide servers, and 6,000 LDAP accounts. Accounts include personal and departmental websites for students, staff, faculty, and researchers for 7 academic departments, 3 institutes, and numerous research groups across 8+ buildings and multiple trailers. Designs, Deploys, and Manages complex systems and services for the College of Engineering. Evaluates, installs, modifies and supports operating systems, databases, utilities, and web related tools. Implements system rollouts. Performs advanced networking tasks to interconnect servers and workstations. Maintains understanding of client network, server, and application trends, and analyzes their application to the College's research, instruction, and administrative functions. Leads, designs, trains, and works on projects designed to implement and enhance the services offered by the technical support group. Designs, runs & manages complex services, servers, databases, and web- based administration that centrally support multiple departments and technical staff throughout the college such as FileMaker Server, Scientific Software requiring customization, license servers, FOG imaging server for over 400 systems, Mac deployment JAMF servers that support 100+ desktop systems for staff, faculty & researchers assuring security & updates. Administration of Drupal containers, Pantheon, and site development with emphasis on web security protocols. Work is accomplished with limited direction. Determines and develops approach to solutions. Work is evaluated upon completion to ensure objectives have been met. Oversees the design, implementation, and operation of JAMF Pro in support of all Apple-based endpoints used by multiple departments in the College in support of instructional, administrative and research computing. Ensures proper JAMF Pro integration for compliance and reporting purposes. Automates aspects of the device lifecycle including deploying and maintaining software, responding to security threats, distributing policies and settings along with analyzing resulting data leveraging automation, to include design, installation, configuration, updates, monitoring, security, and lifecycle support. Installs, configures, and manages centralized application/service monitoring, logging, and analysis tools for desktop systems. Provides training and technical assistance to other system administrators and application owners on monitoring, logging and analysis. Ensures timely and appropriate alerting based on monitoring of both on premise, SaaS, and Cloud hosted services. Envisions new monitoring collections in response to ever changing applications and Infrastructure services. Reviews best practices for security of JAMF Pro services and provides provisioning and distributed management of security access to JAMF. Performs complex security control activities to prevent unauthorized access to networked resources. Coordinates security incidents and implements remediation. Leverages automation, logging, and monitoring systems to improve system security posture. Provides user management including configuring new accounts, password resets, and troubleshooting user login, profile and permission issues. Routinely reviews incidents, identifying problems and addressing them to resolution. Researches, designs, and deploys new/upgraded IT services and prioritizes departmental IT resources to meet functional goals of the College. Meets directly with faculty and Staff on planning project specifications. Performs upgrades to JAMF Pro servers, manages agents, OS patching, and 3rd party software. Duties include packaging 3rd party software, testing policies, imaging Mac endpoints with autopilot, configuring MDM, and deploying JAMF connect. Advanced experience creating, deploying, and managing Mac images, software packages and system policies via JAMF. Possess support and configuration knowledge in an enterprise environment of other Macintosh related applications such as Microsoft Office and Adobe products. This includes methods of packaging volume-licensed applications for deployment and repackaging non-PKG installers. Maintains standards, standard operating procedures (SOPs) and documentation on an ongoing basis. Due to the changing nature of technology and services offered by the College, the position requires adaptability to change and ability to balance multiple concurrent projects while working independently.
• 40% Server Management & Programming - Directly responsible for implementing, administering, supporting, and enhancing critical account services used by a large group of College of Engineering constituencies (the "College"). System administration experience in Linux environments such as Ubuntu, Fedora, CentOS and proficient in tasks such as shell scripting (Bash) and programming (Python/Perl), troubleshooting file and directory permissions, analyzing log files, managing user accounts and groups, resource and security monitoring using PHPLDAPAdmin, and SSH terminal command line troubleshooting. Interacts with faculty across the College to control access to servers, file sharing, and other services. Documents and automates routine account related tasks. Provides resolution to a diverse range of complex problems. Analysis is required to resolve. Uses judgement to develop alternative solutions. Defines, designs and implements Linux server configuration management (e.g., Ansible). Installs, configures, and maintains workstation and server operating systems including all versions of Linux, Windows, and OS X in support of research, and instruction with the use of version control such as Subversion (SVN), Git repository management, Linux kickstarts and pxe booting. Advanced knowledge of configuration management techniques, security, and best practices. Ability to design, program, deploy, and manage hundreds of hosts using the Ansible automation programming language. Ansible is used to manage Linux hosts and windows hosts in a complex networked infrastructure composed of instructional, research, and collegewide servers and services. Independently programs roles that can be used in an automated format to design, build, and maintain all of the College of Engineering resources. Ansible is a system of configuration management written in Python programming language which uses declarative markup language usage to describe configurations. It's used for automation of configuration and operating system setup. Ansible is often used to manage Linux-nodes, but Windows is also supported. Designs custom builds for new instructional Linux and windows hosts by creating an automated kickstart so that multiple machines can be built at once. Manages security software and monitoring systems for multiple departments. Assists with execution of security controls to prevent unauthorized access to networked resources. Administers security policies to control system access. Configures system security to meet specific needs such as Sophos, Nagios, Nessus, Fireye, and Splunk. Extensive in- depth experience working with complex security issues and immediate remediation protocols. Ability to utilize Nessus scanning, Nagios Management, Splunk, Fireye, Sophos for hosts and network compliance issues and vulnerabilities. Independently monitors, detects, protects, repairs, and maintains the security of data, systems and networks. Ability to independently assess a vulnerability and design a solution that can be deployed across hundreds of hosts and servers. Able to act independently to track down issues, and resolve vulnerability when dealing with such things as Cipher issues, High and Critical Severity Vulnerabilities. Independently writes complex scripts/programs using configuration management tools to manage over 400 lab systems and research computers that serve the entire College of Engineering. Writes and executes moderately complex scripts/programs in support of systems management, Accounts, log analysis and other system administration duties for multiple user accounts, systems maintenance, administration, and configuration. Utilizes for example: Bash, Python, Perl, PHP. Ability to deploy and manage servers, hosts, and software containers using Proxmox Virtualization and consolidation platform in a complex networked environment. Designs, builds, and deploys virtualized servers and hosts in support of instruction, research, and central college services. Proxmox is a complete open-source virtualization solution utilized by the College of Engineering for enterprise level virtualization. Ability to use Proxmox to dynamically scale computing and storage as needs grow ensuring that the data adjusts for future growth. Supports design, installation, and maintenance of Linux research labs for supported departments. Supports workstations that are attached to complicated research equipment. Controls user access to research clusters. Expected to keep accurate technical documentation for public and internal use. Develops documentation for both end users and technical staff and ensures that existing documentation is up-to-date. Participates in the development of written policies and procedures for technical operations. Installs, configures, and maintains network devices including printers, switches, hubs, network wiring, communication cabinets, etc. using DNS, DHCP, and networking tracking devices. Builds and maintains various computer and network hardware.
• 15% Department Services - Acts as initial support for college faculty, staff, graduate and undergraduate students, researchers and guests. Answers requests using the web-based ticketing system, and remote desktop via zoom in addition to walkup and phone requests. Elements of questions include, but are not limited to: Windows, Linux (Fedora/CentOS/Ubuntu), Mac computers, NFS Accounts, Samba shares, custom database applications, printers, productivity and other software, power supplies, monitors, hard disks, network interface cards, scanners, and other equipment. Independently troubleshoots and repairs issues providing in person support. Implements system enhancements, such as software, hardware and network configuration, updates and installations for projects and college wide services. Independently diagnoses and analyzes hardware, software, security, and network problems. Performing maintenance; support of client and server hardware and software, installation and configuration of desktop and server operating systems (Linux, Windows, OS X) Installs, configures, and maintains supported software (for example: MS Office, FileMaker Pro, MATLAB, Mathematica, Solidworks, campus connections, backup software, etc.). Troubleshoots complex audio-visual equipment and connections to provide support for conferences, meetings, and events.
• 5% Miscellaneous - Other duties as assigned by supervisor

UC Vaccination Programs Policy:

As a condition of employment, you will be required to comply with the University of California Policy on Vaccinations Programs.

As a condition of Physical Presence at a Location or in a University Program, all Covered Individuals* must participate in any applicable Vaccination Program by providing proof that they are Up-to-Date with any required Vaccines or submitting a request for Exception in a Mandate Program or properly declining vaccination in an Opt-Out Program no later than the Compliance Date (Capitalized terms in this paragraph are defined in the policy.). Federal, state, or local public health directives may impose additional requirements.

For more information, please visit University of California Policy on Vaccinations - https://policy.ucop.edu/doc/5000695/VaccinationProgramsPolicy

*Covered Individuals: A Covered Individual includes anyone designated as Personnel or Students under this Policy who physically access a University Facility or Program in connection with their employment, appointment, or education/training. A person accessing a Healthcare Location as a patient, or an art, athletics, entertainment, or other publicly accessible venue at a Location as a member of the public, is not a Covered Individual.

Equal Employment Opportunity:

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.

Reasonable Accommodations:

The University of California endeavors to make https://jobs.ucsb.edu accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Katherine Abad in Human Resources at 805-893-4664 or email katherine.abad@hr.ucsb.edu. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Privacy Notification Statement

Privacy Notification Statement and Notice of Availability of the UCSB Annual Security and Fire Safety Report Disclosures

Application Status: If you would like to check the status of your application, please log into the Candidate Gateway where you applied and click on 'my activities'.