Senior Systems Administrator - Healthcare IT & Security

Position Summary Healthcare IT provides and manages a comprehensive suite of technology services, infrastructure, healthcare systems, and specialized medical equipment that support UHS and Recreational Sports operations. Responsibilities include managing EHR and practice management systems, laboratory, pharmacy, radiology, and medical imaging systems, as well as maintaining more than 50 physical and virtual servers that process highly‑sensitive data for the campus community. Responsibilities Defines, designs and implements systems, services and technology solutions. Proposes and implements system or device enhancements such as software, hardware and network configuration, updates and installations for projects or services of moderately complex scope. Helps develop and implement network security programs for the extended healthcare network at Tang, Recreational Sports, and remote sites around campus; installs and configures network equipment and components and has some oversight over edge switches, VLANs, network segmentation, and complex port security protocols; helps implement new next‑generation firewall equipment, end‑point protection tools, and other network security platforms. Proposes and implements highly complex system enhancements (software and hardware updates) that will improve the performance and reliability of the system. Monitors critical healthcare systems for performance, reliability, security, and implements appropriate updates, patches, and system changes as needed. Evaluates new system management tools and services and leads efforts to upgrade or replace systems when appropriate. Has some oversight and supports centralized computer servers and makes recommendations for purchase or upgrade of new computer hardware. Evaluates servers, workstations, management tools, and other core systems and recommends purchase of new systems or major upgrades or replacements to existing systems, servers, network equipment, and peripherals. Analyzes, acquires, installs, modifies and supports operating systems, databases, utilities and Internet/intranet‑related tools. Performs complex and advanced analysis techniques to monitor and support critical systems and server infrastructure, database applications, software applications, file servers, network operations, etc. Applies advanced systems/infrastructure concepts to operate the campus' internal data communications systems, including LANs and WANs. Performs moderately advanced network administration and complex security controls to protect the network and sensitive health data. Controls include advanced firewall rule ACL management; VPN, VLAN segmentation, network access controls, network logging, web filtering, web traffic analysis, etc. Executes security controls to prevent hackers from infiltrating campus information. Implements significant and highly complex security controls at all layers of the infrastructure to protect highly sensitive data; implements HIPAA security controls and performs regular HIPAA risk analysis audits to ensure appropriate controls are in place to meet HIPAA compliance requirements. Conducts highly complex systems programming and systems support activities. Develops complex scripts and programming activities to help manage a highly interconnected system environment. Contributes complex systems knowledge to planning, designing and implementing networked systems. Works with the Network Operations Team to design, configure, and manage healthcare networks with additional security controls beyond the campus standard. Administers security policies to control access to systems. Has some oversight of complex Group Policy rules for the extended healthcare network of computers, servers, and users to control access to critical systems with health data. Manages groups and policies for these groups; supports an extensive account management and access control system for authentication and system authorization, ensuring access to healthcare systems and data is highly controlled, tracked, logged, and auditable. Interacts with senior internal and external personnel. Participates on a team of systems/infrastructure professionals. Works closely with senior level Engineers, System Administrators, Database Administrators, Network Engineers, System Architects, and Security Analysts to perform complex work and solve complex system issues and problems. Takes direction from senior campus leadership. Serves as technical lead on critical technology projects for UHS and Recreational Sports and advises senior leadership on capital investment. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Required Qualifications Bachelor's degree in a related area and/or equivalent experience and training. Knowledge, Skills and Abilities Requires advanced knowledge of application programming, database, infrastructure, networking, and other IT functions. Self‑motivated, works independently and as part of a team, demonstrates problem‑solving skills, and meets deadlines. Basic knowledge of how to apply technologies and systems to meet business needs. Strong understanding of regulatory requirements regarding data privacy and security standards (HIPAA). Understanding of system performance monitoring and actions that can be taken to improve or correct performance. Knowledge of the design, development and application of technology and systems to meet business needs. Requires extensive knowledge of other areas of IT and thorough understanding of systems‑related issues and actions that can be taken to improve or correct performance. Demonstrated skills associated with adapting equipment and technology to serve user needs. Demonstrated comprehensive understanding of how system management actions affect other systems, system users and related functions. Demonstrated experience writing and editing complex scripts used to perform system maintenance and administration. Advanced knowledge of computer security best practices and policies, including securing server‑based software and meeting HIPAA security standards. Must be able to communicate technical information in a clear and concise manner across the organization and at varying levels. Work schedule may include evenings and weekend work when necessary. Preferred Qualifications Proficient and experienced in using BigFix, working in the Citrix environment and deploying Citrix apps, and using Feronics DeepFreeze. Salary & Benefits The budgeted salary range that the University reasonably expects to pay for this position is $121,984.64 - $146,307.86. This is a 100%, full‑time (40 hours per week), career position that is eligible for full UC benefits. This position is exempt and paid monthly. Equal Employment Opportunity The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law. Other Information This is not a visa opportunity. This position is governed by the terms and conditions of the Technical Unit (TX) agreement with the University Professional and Technical Employees (UPTE). Your employment is dependent on obtaining and maintaining a credentialing clearance (if applicable), background clearance and medical clearance according to University Health Service policies. Conviction History Background This is a designated position requiring fingerprinting and a background check due to the nature of the job responsibilities. Berkeley does hire people with conviction histories and reviews information received in the context of the job responsibilities. The University reserves the right to make employment contingent upon successful completion of the background check. Mandated Reporter This position has been identified as a Mandated Reporter required to report observed or suspected abuse or neglect of children, dependent adults, or elders to designated law enforcement or social service agencies. We reserve the right to make employment contingent upon completion of signed statements acknowledging the responsibilities of a Mandated Reporter. Misconduct Disclosure As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer. "Misconduct" means any violation of the policies or laws governing conduct at the applicant's previous place of employment, including, but not limited to, violations of policies or laws prohibiting sexual harassment, sexual assault, or other forms of harassment, discrimination, dishonesty, or unethical conduct, as defined by the employer. For reference, the following UC policies address some forms of misconduct: UC Sexual Violence and Sexual Harassment Policy; UC Anti‑Discrimination Policy; Abusive Conduct in the Workplace. #J-18808-Ljbffr