Systems Engineer

Job DescriptionInsight Global is assisting a client in identifying a Systems Engineer to lead identity and access management initiatives across a global enterprise. This role is ideal for someone who thrives in hands‑on technical environments and can manage multiple projects while supporting daily operations. The engineer will join a team of 13 other engineers, work closely with other technical teams, project managers, and security stakeholders to ensure secure and efficient access across cloud and on‑prem systems.Key ResponsibilitiesAzure Entra ID / Identity ManagementLead the design and implementation of identity solutions using Azure Entra IDManage Conditional Access Policies, Privileged Identity Management (PIM), and role assignments across management groups, subscriptions, and resourcesAdminister app registrations, enterprise applications, service principals, and managed identities with a focus on least‑privilege access and MS Graph API permissionsOversee user and group management, endpoint security, and mobile device policies via IntuneMaintain and optimize multifactor authentication (MFA), self‑service password reset (SSPR), and Windows Hello for Business (WHfB)Automate identity‑related tasks using PowerShell scripting and scheduled jobsStay current on Entra ID features, security trends, and best practices to drive continuous improvementActive DirectoryManage a global AD environment with multiple domain controllers and sites supporting 5,000+ usersAdminister DNS, GPOs, OU structures, and user object configurationsImplement Microsoft Tiering, IAM, and PAM models to enforce secure accessMaintain domain integrity through FSMO role management and disaster recovery planningDelegate permissions across OU structures and streamline access controlsAutomate AD tasks using PowerShell for operational efficiencyOktaServe as a subject matter expert on Okta platform capabilities and IAM concepts including SSO, SAML, OAuth, OIDC, MFA, and RBACDesign and configure Okta solutions aligned with enterprise architecture and security requirementsSupport application integrations and troubleshoot identity‑related issues across cloud and on‑prem environmentsCollaborate with architects and stakeholders to refine IAM strategies and ensure secure access provisioningWe are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: and Requirements10+ years of experience in infrastructure engineering with a focus on identity and access managementProven expertise in Azure Entra ID and Active DirectoryHands‑on experience with CyberArk (CPM, Vault, PSM, PVWA)Experience in regulated industries (energy, financial, compliance)Deep understanding of:Conditional Access PoliciesPrivileged Identity Management (PIM)Application Registrations and MS Graph API permissionsMultifactor Authentication (MFA), Self‑Service Password Reset (SSPR), Windows Hello for Business (WHfB)Azure user/group management, Intune policies, mobile device management, and endpoint securityExperience in an enterprise level organization, this specific environment has over 5,000 usersPowerShell scripting skills for automation and scheduled tasksSubject matter expertise in Okta:Identity federation, SSO, SAML, OAuth, OIDCRole‑based access control (RBAC) and least privilege principlesApplication integration and platform configurationTroubleshooting and supporting Okta‑based IAM solutionsExperience with backup and recovery tools:Rubrik, Cohesity, Metallic (Commvault)Familiarity with Intune Autopilot and policy management#J-18808-Ljbffr