> Markdown version of [/jobs/ext/3199955-it-system-administration-senior-specialist](https://www.wearedevelopers.com/jobs/ext/3199955-it-system-administration-senior-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT System Administration - Senior/Specialist - **Company:** Inc Washington - **Location:** Lacey, WA, United States (Remote available) - **Experience:** Expert - **Salary:** $94,620.0 - $127,248.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Microsoft Azure, Cloud Computing, Computer Networks, Domain Name System (DNS), Identity and Access Management, Name Server, Network Architecture, Windows Domain, Windows PowerShell, Azure Active Directory, Virtual Local Area Networks, Cloud Platform System, Microsoft InTune, Containerization, Information Technology, Performance Monitor - **Published:** September 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=380b752c143d9765 ## About the Role For detailed information on how we calculate experience and responses to other frequently asked questions, please visit our Recruitment website., * Seven years of experience and/or education related to the duties of the position, which must include the following: + Critical Thinking & Decision-Making - Proven track record evaluating risks, analyzing complex IAM, AD, DNS, and GPO issues, and making informed decisions to maintain secure and stable operations. + Security & Compliance - Demonstrated ability to apply and uphold security policies, governance requirements, and best practices to maintain compliant and secure identity, directory, and DNS environments. + Identity & Access Management Administration - Demonstrated ability to manage identity lifecycles, authentication, permissions, and roles to ensure secure and efficient access control. + Active Directory & Entra ID Management - Proven track record configuring, maintaining, modernizing, and troubleshooting Active Directory and Azure Entra ID to ensure reliable identity and directory services. + Group Policy Architecture & Management - Demonstrated ability to design, implement, and troubleshoot GPOs to enforce secure configurations and agency-wide standards. Ability to translate GPO's to Intune and Azure Policies. + DNS Administration & Architecture - Proven track record designing, implementing, securing, and troubleshooting on-premise and cloud DNS services to ensure accurate and reliable name resolution. + System Maintenance & Continuity Planning - Demonstrated ability to apply updates, monitor performance, and implement disaster recovery strategies to maintain secure and resilient IAM, AD, and DNS operations. * Education involving a major study in Computer Science, Information Technology (IT), Science, Technology, Engineering, Mathematics (STEM), or closely related field. This position does not require formal education. Instead, applicants may meet the qualification requirement through experience alone or through any combination of experience and education totaling seven years. Education in a related field may be applied year-for-year toward the seven-year requirement, as long as the applicant has at least three years of directly related experience and meets all the required competencies listed above. The examples listed below illustrate acceptable combinations of experience and education that satisfy this requirement. Examples of how to qualify: * 7 years of experience. * 6 years of experience AND 30-59 semester or 45-89 quarter college credits. * 5 years of experience AND 60-89 semester or 90-134 quarter college credits (Associate's degree). * 4 years of experience AND 90-119 semester or 135-179 quarter college credits. * 3 years of experience AND a Bachelor's degree or higher. Special Requirements/Conditions of Employment: * Must be able to provide transportation to and from office or offsite trainings or assignments. * This position requires training to keep consistent with industry best practices. Leadership works with industry leaders to forecast changes in information technology and lists required training in this position's yearly Performance Development Plan (PDP). Staff within this division are provided two (2) hours per week for training. It is expected that this position will take what is learned in their training and apply it to their daily work., * Cloud Infrastructure Familiarity - Ability to understand and work with broader Azure services (beyond Entra ID and DNS) to support identity integrations across cloud environments. * Scripting & Automation - Ability to use tools like PowerShell to automate identity, AD, DNS, and GPO tasks to improve efficiency and consistency. * Identity Governance & Administration (IGA) Tools - Ability to work with identity governance platforms and workflows to support lifecycle automation, attestation, and compliance. * Hybrid Identity Architecture - Ability to design and support hybrid identity environments that integrate on-premise AD with cloud identity platforms. * Network Infrastructure Awareness - Ability to understand related network components (firewalls, VLANs, routing) that affect IAM and DNS performance and security. ## Description * This position is eligible for telework and flexible schedule options. * You may telework most of your work time with occasional in-person meetings and activities. * Schedules are dependent upon position needs and are subject to change., In this role, you will be the senior Identity and Access Management Administrator, with responsibilities for Windows Domain Controllers and cloud-based identity management platform, including Azure. You will be responsible for architecting and modernizing Ecology's Identity and Access Management strategy through the adoption of cloud-native technologies. What you will do: * Mentor and guide other Domain Administrators. * Provide excellent customer service and collaborate with other teams to improve the security posture of Ecology's Identity and Access Management strategy. * Communicate effectively with Management to articulate Ecology's strategy for modernizing Identity and Access Management. * Assess the current Windows Domain Controller architecture and health and identify optimization opportunities. * Assess the current Group Policy Objects architecture and health and identify opportunities to streamline. * Assess and identify opportunities to improve the security posture of Ecology's Identity and Access Management strategy and infrastructure. * Assess and plan the adoption of Intune based policy management., Diversity, Equity, Inclusion, and Respect (DEIR) are core values central to Ecology's work. We strive to be a workplace where we are esteemed for sharing our authentic identities, while advancing our individual professional goals and collaborating to protect, preserve, and enhance the environment for current and future generations. Diversity: We celebrate and appreciate diversity; our unique perspectives and abilities enrich us all and lead to innovative approaches and solutions. Equity: We champion equity, recognizing that each of us need different things to thrive. Inclusion: We intentionally create and hold space so that we all have meaningful opportunities to participate and contribute to Ecology's work. Respect: We treat each other with respect and dignity, acknowledging the inherent worth of our diverse perspectives and lived experiences, even in times of uncertainty and disagreement. We believe that DEIR is both a goal and an action. We are on a journey, honoring our shared humanity and taking steps to demonstrate our commitment to a vision where each of us is heard, seen, and valued., We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. That's why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs. Read about our benefits: The following information describes typical benefits available for full-time employees who are expected to work more than six months. Actual benefits may vary by appointment type or be prorated for other than full-time work (e.g. part-time); view the job posting for benefits details for job types other than full-time. Note: If the position offers benefits which differ from the following, the job posting should include the specific benefits. Insurance Benefits Employees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state. Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax-deferred dollars toward their health care expenses. Employees are also covered by basic life and long-term disability insurance, with the option to purchase additional coverage amounts. To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs. Dependent care assistance allows the employee to save pre-tax dollars for a child or elder care expenses. Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction. The Washington State Employee Assistance Program promotes the health and well-being of employees. Retirement and Deferred Compensation State Employees are members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems' web site. Employees also have the ability to participate in the Deferred Compensation Program (DCP). This is a supplemental retirement savings program (similar to an IRA) that allows you control over the amount of pre-tax salary dollars you defer as well as the flexibility to choose between multiple investment options. Social Security All state employees are covered by the federal Social Security and Medicare systems. The state and the employee pay an equal amount into the system. Public Service Loan Forgiveness If you are employed by a government or not-for-profit organization, and meet the qualifying criteria, you may be eligible to receive student loan forgiveness under the Public Service Loan Forgiveness Program. Holidays Full-time and part-time employees are entitled to paid holidays and one paid personal holiday per calendar year. Note: Employees who are members of certain Unions may be entitled to additional personal leave day(s), please refer to position specific Collective Bargaining Agreements for more information. Full-time employees who work full monthly schedules qualify for holiday compensation if they are employed before the holiday and are in pay status for at least 80 nonovertime hours during the month of the holiday; or for the entire work shift preceding the holiday.