Identity Engineer – Tier 2

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct daily administration and support for client hybrid identity environments that encompass both on-premises Active Directory and Microsoft Entra ID.

• Manage the provisioning and de-provisioning of user and group accounts in on-premises Active Directory, ensuring correct OU placement.

• Implement and uphold established Joiner/Mover/Leaver identity lifecycle automation, confirming completion and addressing any exceptions.

• Execute password resets and account unlocks for on-premises AD and synchronized Entra ID identities.

• Assist with multifactor authentication enrollment and resolve common authentication failures.

• Diagnose Group Policy application issues using approved policies, identifying precedence, scope, and replication problems without altering or creating GPOs.

• Oversee and address Entra Connect synchronization errors and sync health alerts, resolving routine issues and escalating configuration-level challenges.

• Allocate licenses and perform standard attribute updates within Entra ID.

• Address Severity 2 and 3 identity service interruptions, such as sync delays and login failures.

• Forward suspected security incidents to the designated cybersecurity team in accordance with the incident response runbook.

• Request, utilize, and release just-in-time privileged access in line with client PAM procedures while maintaining precise elevated-activity records.

• Cease activities that require client authorization, including sync configuration and topology changes, GPO/OU/schema modifications, Conditional Access adjustments, elevated role assignments, PIM/PAM configuration, trust and federation modifications, and tenant-level authentication method changes.

• Ensure accurate documentation and adhere to change management protocols within client environments.

• Report to the Director of Operations under the functional guidance of the client's designated identity function owner.

⛳️ Requirements

• 3–5 years of experience administering Active Directory in a production setting, covering account lifecycle, OU and group management, and Group Policy troubleshooting.

• Practical experience with hybrid identity, particularly Entra Connect or Azure AD Connect synchronization, including sync error triage, attribute flow, and knowledge of how on-premises changes propagate to the cloud.

• Proficient understanding of Microsoft Entra ID administration, including licensing, attribute management, and authentication methods.

• Hands-on experience supporting multifactor authentication and Conditional Access from an end-user troubleshooting perspective.

• Familiarity with Privileged Identity Management and just-in-time access models.

• Capability to work effectively without standing administrative rights.

• Understanding of identity lifecycle automation with the ability to validate and remediate automated provisioning workflows.

• Skill in differentiating between an identity service disruption and a potential identity compromise, with immediate escalation for the latter.

• Experience providing support in a managed services or multi-client environment, including adherence to ticket queue discipline, SLA compliance, and change management.

• Proficiency in PowerShell for directory administration and reporting.

• Preferred Microsoft certifications such as SC-300 or equivalent experience.

• Ability to manage client and company data responsibly.

• Commitment to following information security policies.

• Willingness to complete necessary security training.

• Promptly report suspected incidents or policy violations.

• Maintain accurate documentation and follow change management procedures.

🏝️ Benefits

• Required security training.

• Remote work arrangement.