Combines strategic identity modernization with senior-level operational support.
Will lead multiple identity modernization projects in parallel while serving as the escalation point for complex identity issues that require deep troubleshooting expertise.
Architect and implement Conditional Access, MFA, SSO, and Zero Trust policies.
Lead identity lifecycle automation and governance, design secure integrations using OAuth, SAML, and OpenID Connect, and harden privileged access with PIM, PAM, and tiered administration.
Evaluate and modernize legacy identity components such as ADFS and on-premises IAM tooling, manage and execute multiple identity modernization projects simultaneously, and serve as the senior escalation point for complex identity-related helpdesk tickets.
Collaborate across IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve complex issues related to AD, Entra ID, ADFS, PKI, certificates, and cloud identity.

Provide expert support for Active Directory and Entra ID by managing accounts, groups, group policies, and directory synchronization across hybrid identity infrastructures.
Architect, configure, and support Conditional Access, MFA, SSO, and Zero Trust access policies in Entra ID.
Implement and support secure app integrations using OAuth, SAML, and OpenID Connect, including app/enterprise applications, and associated claims and access policies.
Manage and troubleshoot ADFS and other legacy or transitional identity components to maintain secure access to enterprise and cloud resources.
Plan and guide migrations away from legacy patterns where appropriate.
Serve as the senior escalation point for identity-related helpdesk tickets, including advanced account provisioning problems, access failures, directory synchronization issues, and application sign-in problems.
Mentor and support junior administrators and helpdesk staff, etc.
Conduct regular audits of Active Directory and Entra ID environments to detect, address, and mitigate potential security vulnerabilities.
Create and maintain documentation related to processes, configurations, and governance policies.

Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 6 years of professional level experience, a high school education or equivalent with related certifications will be considered.
Relevant Microsoft Certifications are preferred.
2+ years: Experience managing enterprise identity platforms, including Active Directory Domain Services and Entra ID (Azure AD), in hybrid environments. Demonstrated experience with Conditional Access, MFA, and SSO design and support.
Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads.
Hands-on experience with Active Directory Federation Services (AD FS) and familiarity with Public Key Infrastructure (PKI) systems, including creating, renewing, and troubleshooting certificates.
Technical Certifications such as Microsoft Certified Solutions Associate (MCSA) and/or Microsoft Certified Solutions Expert (MCSE) or Microsoft Certified: Azure Administrator Associate, Azure Fundamentals or equivalent are preferred.
A valid/clear driver's license is required.

IT SPECIALIST - SR. IT SPECIALIST - Microsoft Entra ID & Active Directory Specialist

Quick Overview