Identity Management Windows Engineer

POSITION SUMMARY:

The Identity Management Windows Engineer is responsible for the design, implementation, administration, and support of the company's Identity and Access Management (IAM) platforms and Microsoft enterprise collaboration services. Primary responsibilities include administration of Active Directory, Microsoft Entra ID, Okta Identity Cloud, Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity governance, and Microsoft 365 services including Exchange Online, SharePoint Online, and Microsoft Teams.
Secondary responsibilities include administration of Microsoft Azure cloud infrastructure, virtual server environments, backup and recovery systems, storage infrastructure, and disaster recovery solutions. The position provides technical leadership, operational support, and on-call response to ensure the security, reliability, and availability of critical business systems.

JOB DUTIES:
Identity & Access Management (Primary)

• Administer Active Directory, Microsoft Entra ID, and Okta Identity Cloud, including user lifecycle management, access controls, Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity governance, privileged access management, and authentication policies.
• Configure and maintain identity federation and directory integrations between Active Directory, Microsoft Entra ID, Okta, and third-party applications using SAML, OAuth, OIDC, and SCIM.
• Implement and maintain identity security controls aligned with Zero Trust Architecture (ZTA), cybersecurity standards, regulatory requirements, and company policies.
• Monitor identity, authentication, and access-related activity; investigate incidents and implement corrective actions to strengthen the organization's security posture.
• Lead IAM initiatives and projects including application onboarding, access modernization, authentication enhancements, and identity lifecycle automation.

• Administer and support Microsoft 365 services including Exchange Online, SharePoint Online, Microsoft Teams, and related collaboration technologies.
• Manage Microsoft 365 security, compliance, mail flow, collaboration, and governance configurations.
• Support integration of Microsoft 365 services with Entra ID, Okta, and other enterprise applications.
• Monitor and optimize Microsoft 365 environments for availability, performance, security, and user experience.

• Design, implement, and support Microsoft Azure cloud infrastructure and hybrid cloud solutions including networking, compute, storage, identity, security, and connectivity services.
• Monitor and optimize cloud resources for performance, availability, security, and cost efficiency.
• Support cloud migrations, modernization initiatives, and infrastructure automation efforts.

• Administer and support VMware and virtual server environments.
• Administer, maintain, and troubleshoot Storage Area Network (SAN) infrastructure, backup systems, and recovery solutions.
• Support business continuity and disaster recovery initiatives, including Azure Backup, Azure Site Recovery, backup operations, recovery testing, and disaster recovery planning.
• Install, support, and maintain enterprise infrastructure, virtualization, networking, and security services.
• Monitor, maintain, troubleshoot, and optimize server, storage, cloud, and supporting infrastructure systems.

• Ensure accurate documentation of identity, Microsoft 365, cloud, server, and infrastructure configurations and procedures.
• Research emerging technologies and recommend security, identity, collaboration, and infrastructure enhancements.
• Lead and manage infrastructure projects of moderate complexity and scope.
• Ensure compliance with Sarbanes-Oxley (SOX), cybersecurity, and other regulatory requirements.
• Provide technical leadership, mentoring, and operational guidance to Network Administrators and other IT staff.
• Participate in Continuous Improvement initiatives and perform other duties as assigned.

QUALIFICATIONS:

• 5+ years of experience administering enterprise identity management, Microsoft 365 services, and infrastructure platforms.
• Deep experience administering Active Directory (AD) and Microsoft Entra ID (Azure AD).
• Strong expertise with Identity and Access Management (IAM) platforms, including hands-on administration of Okta Identity Cloud.
• Experience implementing and supporting Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions.
• Strong knowledge of identity governance, access controls, user lifecycle management, privileged access management, and directory services.
• Experience administering Microsoft 365 services, including Exchange Online, SharePoint Online, and Microsoft Teams.
• Ability to ensure the security, availability, and reliability of enterprise identity and collaboration platforms.
• Experience supporting Microsoft Azure and hybrid cloud environments.
• Experience supporting virtual server environments, backup and recovery systems, storage infrastructure, and disaster recovery technologies.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Relevant Microsoft, Okta, Azure, and identity/security certifications preferred.
• Excellent verbal and written communication skills.
• Proficiency with Microsoft Office applications.
• Valid California Driver License.