Identity Application Administrator

The Identity Application Administrator will be responsible for the daily operational health of our Identity Governance Administration (IGA) systems. This role moves beyond general administration; you will be the first line of defense in monitoring identity lifecycles, troubleshooting provisioning errors, and ensuring secure access for Gordon Food Service employees and contractors.

What you will do:

Operational Support & Incident Management Ticket Management: Monitor and resolve incidents and service requests assigned to the IAM group. This includes handling time-sensitive requests from HR. Inbox Monitoring: actively manage the IAM group inbox to identify and respond to unread messages, error notifications, and user inquiries. On-Call/After-Hours Support: Participate in an on-call rotation to handle urgent alerts and manage system dependencies during scheduled maintenance windows. Identity System Administration Queue Management: Periodically review Pending Task queues for unusual depth or failures. Investigate anomalous error conditions in provisioning comments and metadata. Error Resolution: Troubleshoot and resolve known integration issues, such as: Password history conflicts Internal Server errors requiring coordination with teams. Job Control & Monitoring: Monitor job logs for failures or “hung” processes. Perform manual re-runs of import jobs while coordinating timing to avoid overlap with incremental provisioning. Maintenance: Pause and resume reconciliation jobs during downstream system outages to prevent data corruption. User Lifecycle Management Rehire Auditing: Validate the “Rehired User” process to ensure correct behavior, including confirming Role assignments, birthright role provisioning, and the re-linking of orphaned Google accounts. Role Governance: Perform weekly de-provisioning of Enterprise Roles mapped to users who have been inactive/terminated for greater than 30 days. Google Workspace Administration Access Requests: Review and approve Google New Account and SKU Upgrade requests. Synchronization: Investigate and resolve Google SKU assignment mismatches and troubleshoot connector issues impacting import mappings.

When you will work: Monday to Friday, 8 am to 5 pm Hybrid schedule, 4 days in office in Wyoming, MI, with 1 day remote

Technical Aptitude: Experience with or strong desire to learn Identity and Access Management (IAM) concepts. Problem Solving: Ability to analyze system logs, identify error patterns (e.g., HTTP 500 errors, password failures), and follow technical documentation to resolve complex issues. Communication: Excellent written and verbal skills to coordinate with HR, end-users, and other IT teams. Attention to Detail: Critical for managing user access rights and ensuring compliance during rehire and termination processes. Preferred Technology Exposure ITSM Tools: Experience with ticketing systems like ServiceNow. Identity Governance: Exposure to Saviynt EIC, SailPoint, or similar IGA platforms. Directory Services: Basic understanding of Active Directory, Google Workspace (Admin), or LDAP.

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There’s a seat at our table for you…