Job Description
KAYGEN is an emerging leader in providing top talent for technology-based staffing services. We specialize in providing high-volume contingent staffing, direct hire staffing and project-based solutions to companies worldwide ranging from startups to Fortune 500 and Managed Service Providers (MSP) across a wide variety of industries.
Job Title: SailPoint ISC, Active Directory, Azure AD, and Exchange Contractor
Location: Los Angeles, CA
Duration: 6 Months Plus
Job Description:
Location: Los Angeles, CA
Duration: 6 Months Plus
Job Description:
- The contractor will manage, implement, and improve the identity and asset ecosystem across the following core platforms:
- SailPoint Identity Security Cloud (ISC) and NERM
- Active Directory (AD) On-Premises
- Azure Active Directory (Azure AD / Microsoft Entra ID)
- Microsoft Exchange Online / Exchange Server Hybrid Messaging
Qualifications :
Experience with SailPoint (or any other Identity Governance and Administration solution) and Microsoft Entra. Experience managing Joiner-Mover-Leaver (JML) processes. Experience troubleshooting provisioning and aggregation failures. Strong understanding of identity lifecycle management and security frameworks. Familiarity with hybrid Exchange environments and Office 365 services. Deep operational expertise with Microsoft Active Directory Services (Forest/Domain architecture, GPO application, trust relationships) and Azure AD/Microsoft Entra ID schemas. Hands-on experience administering Microsoft Exchange Online and hybrid Exchange environments, including mailbox management, distribution groups, mail flow, transport rules, delegation, retention, archive, and PowerShell automation. Proven implementation history with SailPoint Identity Security Cloud (ISC) and NERM. Strong capabilities in scripting languages (PowerShell, JavaScript, or BeanShell) used for building custom enterprise integration paths. Prior work with public sector or large-scale IT operations. Vendor certification in AD, AAD, SailPoint, Exchange is highly preferred. Exchange Automation and ServiceNow Integration : Build or refine PowerShell-based automation and ServiceNow fulfillment processes for mailbox, group, delegation, and lifecycle requests with appropriate auditability and error handling. Compliance and Retention Coordination : Support mailbox hold, retention, archive, eDiscovery support, and access review processes in coordination with security, records, and compliance stakeholders. Mailbox Lifecycle Management: Administer mailbox provisioning, modification, deactivation, shared mailbox conversion, mailbox delegation, and retention-related transitions aligned with identity lifecycle events. Distribution Group and Mail-Enabled Security Group Governance: Standardize ownership, membership review, naming conventions, and request fulfillment for Microsoft Exchange distribution groups and mail-enabled security groups. Hybrid Exchange Attribute Alignment: Validate mail attributes, proxy addresses, aliases, target addresses, remote mailbox properties, and directory synchronization dependencies between on-premises AD, Exchange, and Microsoft Entra ID. Mail Flow and Transport Rule Support: Troubleshoot delivery issues, connector behavior, allowed/blocked sender configuration, transport exceptions, and rule conflicts that affect business operations.
Microsoft Exchange Online / Hybrid Messaging Operational Tasks Automate non-employee identity creation, sponsor tracking, lifecycle transitions, and downstream birthright access provisioning. Support automated onboarding and offboarding processes. Implement workflow enhancements for employee status changes. Monitor and manage the entire SailPoint ISC environment including integrations with Workday, Active Directory, Azure AD, and SailPoint. Create and update approval workflows and policies. Review and resolve identity lifecycle processing errors. Monitor account aggregation jobs and connector health. Troubleshoot provisioning and deprovisioning failures. Integrate an inbound data feed driven directly by a ServiceNow Request payload into SailPoint NERM to automate Contractor onboarding.
SailPoint ISC Architect, configure, and deploy the native SailPoint Azure AD direct connector to replace or augment legacy synchronization pathways. Configure secure OAuth 2.0 API integrations via Microsoft Graph API. Establish data aggregation schedules, attribute mappings, and account correlation rules to ensure zero downtime.
Azure AD Direct Connector Deployment to SailPoint ISC Health & Directory Maintenance: Monitor, troubleshoot, and remediate health issues within the on-premises AD environment related to object corruption, duplication, or sync latencies affecting downstream IAM tools. Organizational Unit (OU) & Object Management: Restructure, cleanup, and standardize OU architecture, managed service accounts (MSAs), and security groups to facilitate accurate automated provisioning. Group Policy Object (GPO) Alignment: Review and adjust GPOs impacting user provisioning, login scripts, and local profile creation to eliminate conflicts with SailPoint-driven access models. Nested Group Rationalization: Audit and remediate highly nested security groups causing token bloat or unmapped access privileges during automated SailPoint entitlement aggregations. Sid-History and Schema Attribute Audits: Remediate legacy security identifier (SID) histories and validate schema extensions required for advanced attribute matching across hybrid infrastructures. Scope of Work:
The contractor will focus on high-complexity implementation, onboarding new platform modules, and root-cause analysis of systemic integration friction. Day-to-day work involves minimal low-volume ticket queues, prioritizing long-term stabilization over transactional ticket closure.
Key Responsibilities:
On-Premises Active Directory (AD) Operational Tasks
At KAYGEN, people are at the heart of everything we do. We foster a diverse, inclusive, and employee-driven culture where every individual is valued, empowered, and encouraged to bring their authentic self to work. Our candidate-first approach means we are committed to understanding your career goals and connecting you with opportunities that align with your aspirations, skills, and potential. Whether you're taking the next step in your career or searching for your dream opportunity, KAYGEN is more than a staffing partner—we're a community dedicated to helping you grow, succeed, and thrive. Join us and discover a place where your talent is recognized, your ambitions are supported, and your future is built alongside a team that invests in your success every step of the way.
Our team of experienced staffing experts will work with you to find you the best opportunity. For more information, please visit us at www.kaygen.com.
Benefits:
- Free Healthcare Insurance
- 401(k) Retirement Plan
- Free Life Insurance
- Sick Time Off
- Mentorship Program
- Certifications
- Referrals
- Family and Wellness benefits
- Continuous Growth and Career Development
Numbers & Facts
| Location | Los Angeles, CA |
| Industry | Computer/IT Services |
| Salary | $60–$70 Per Hour |
| Company Size | 100 to 499 employees |
| Year Founded | 2003 |
| Website | http://www.kaygen.com |
Benefits
Paid Sick Days, Professional Development, 401K, Employee Referral Program, Flexible Spending Accounts, Employee Events, Life Insurance, Merchandise Discounts
About Company
Kaygen, an award-winning technology consulting and talent firm, assists organizations to achieve digital transformation. From structuring data to the Cloud and visualization, Kaygen leads the digital transformation of global clients.
Kaygen, from the Japanese word, kaizen, for continuous improvement, signifies how we continuously seek to bring expert tech talent to our client engagements to create a sustainable competitive advantage. However, there is more. Our company is diverse, and minority woman owned and operated by expert data technologists who have conceived and developed the very strategic technology initiatives that we now engage in for our clients with our talent.
Our core belief in diversity, complemented by the principles of kaizen, ensures we bring the best expert data talent to work transparently, collaboratively, and with the flexibility to ensure client success.
Visit http://www.kaygen.com/ for a solutions overview.
.
Skills
- Advertising Operationsunmatched
- Application Programming Interface (API)unmatched
- Automationunmatched
- Business Operationsunmatched
- Career Developmentunmatched
- Cloud Computingunmatched
- Community Supportunmatched
- Data Collectionunmatched
- Direct Advertisingunmatched
- Distribution Managementunmatched
- Ecosystemsunmatched
- Error Handlingunmatched
- Establish Prioritiesunmatched
- Fortune 500 Customersunmatched
- Governmentunmatched
- Health Insuranceunmatched
- Identify Issuesunmatched
- Identity Data Managementunmatched
- JavaScriptunmatched
- Mail Processingunmatched
- Maintain Complianceunmatched
- Mentoringunmatched
- Microsoft Active Directoryunmatched
- Microsoft Exchange Serverunmatched
- Microsoft Exchange Server Administrationunmatched
- Microsoft Product Familyunmatched
- Microsoft Windows Azureunmatched
- Microsoft Windows NT Group Policyunmatched
- OAuthunmatched
- Onboardingunmatched
- Process Managementunmatched
- Root Cause Analysisunmatched
- Schedule Developmentunmatched
- Scripting (Scripting Languages)unmatched
- ServiceNowunmatched
- Startupunmatched
- Team Lead/Managerunmatched
- Testingunmatched
- Wheel/Front-End Loaderunmatched
- Windows PowerShellunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder