Systems Engineer

The Systems Engineer will serve as a technical lead and subject matter expert responsible for the design, architecture, implementation, administration, operation, and ongoing support of Identity and Access Management (IAM) solutions. This role will focus on leveraging Microsoft Entra ID, Active Directory, and Okta to deliver secure, scalable, and effective identity and access management capabilities.

Duties:

• Demonstrate advanced knowledge of Microsoft Entra ID features and capabilities, including Conditional Access Policies, Privileged Identity Management (PIM), and Application Registrations.

• Manage and maintain PIM configurations, including the assignment and administration of roles and IAM permissions across Azure Management Groups, Subscriptions, and individual Resources.

• Manage Application Registrations, Enterprise Applications, Service Principal Names (SPNs), and Managed Identities, ensuring adherence to least-privilege principles when assigning Microsoft Graph API permissions.

• Maintain and support identity security capabilities, including Multi-Factor Authentication (MFA), Self-Service Password Reset (SSPR), and Windows Hello for Business (WHfB).

• Develop and maintain PowerShell scripts to support administrative tasks, automate processes, and schedule data management activities within Azure.

• Administer and maintain Microsoft Intune policies and Windows Autopilot configurations.

• Monitor new Entra ID functionality, emerging security practices, and industry developments, recommending enhancements and improvements to existing solutions.

• Administer and support large-scale Active Directory environments spanning multiple geographic locations, numerous domain controllers, and 5,000+ users.

• Maintain expertise in Active Directory infrastructure, including DNS, Group Policy Objects (GPOs), user accounts, organizational units (OUs), and directory administration.

• Apply Microsoft security tiering methodologies and demonstrate a solid understanding of Identity and Access Management (IAM) and Privileged Access Management (PAM) principles.

• Configure and maintain delegated permissions throughout the Active Directory domain and OU hierarchy.

• Create and manage PowerShell scripts, automation processes, and scheduled tasks to streamline administrative operations.

• Understand and execute Active Directory disaster recovery procedures, including the steps required to restore domain services following a major outage or disaster.

• Demonstrate comprehensive knowledge of IAM standards and technologies, including identity federation, Single Sign-On (SSO), SAML, OAuth, OpenID Connect (OIDC), MFA, Role-Based Access Control (RBAC), and least-privilege access principles.

• Serve as an Okta subject matter expert, providing guidance on application integrations, IAM capabilities, platform functionality, and the Okta product roadmap.

• Architect, configure, and deploy Okta platform solutions that support the overall technical architecture and meet customer business and technical requirements.

• Lead and assist with integrating customer applications into Okta-based IAM environments, identifying and resolving technical challenges throughout the integration lifecycle, including before, during, and after implementation.

• Minimum of 5 years of relevant, progressively responsible professional experience in Identity and Access Management, infrastructure, or a related technical discipline.

• Oversee Azure infrastructure administration, including user accounts, security groups, conditional access policies, Intune, mobile device management (MDM), and endpoint security.

• Support and maintain Windows Server environments, with experience spanning Windows Server 2016 through Windows Server 2025.

• Understand and manage Flexible Single Master Operations (FSMO) roles to preserve Active Directory domain security, stability, and integrity.

• Experience with CyberArk is a plus.

• Familiarity with Rubrik is a plus.

• Microsoft, Azure, and/or Okta certifications are highly desirable., * Bachelor’s degree in Computer Science or a related discipline, or an equivalent combination of education, training, and professional experience.