IT Cloud & Identity Administrator II

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee, secure, and enhance Microsoft 365, Entra ID, Azure, AWS, Active Directory, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and associated cloud, identity, and enterprise services.

• Manage identity and access controls throughout the user and application lifecycle.

• Administer privileged access and processes related to Privileged Access Management (PAM), including management of privileged accounts, approval workflows, governance of service accounts, privileged session monitoring, and periodic validation.

• Execute advanced systems and cloud administration for hybrid infrastructure, which includes servers, directory services, cloud workloads, patching, vulnerability remediation, configuration management, and operational controls.

• Support security operations by reviewing alerts, logs, access activities, cloud events, and vulnerability findings.

• Propose and implement remediation or compensating controls as necessary.

• Lead designated cloud, identity, infrastructure, security, and automation projects.

• Create and sustain standards, procedures, technical documentation, runbooks, configuration records, access review evidence, and operational artifacts.

• Collaborate with business stakeholders and vendors to address complex issues, enhance reliability and controls, and participate in after-hours on-call responses.

• Address urgent operational and security incidents outside regular business hours when required.

⛳️ Requirements

• A Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field is preferred; equivalent advanced technical experience may be considered.

• A minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role is required.

• Advanced expertise in Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and associated cloud and enterprise services.

• Strong comprehension of identity, access, and privileged access management practices, including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews.

• Experience in supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls within hybrid environments.

• Familiarity with scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, application provisioning, SAML/OIDC, SCIM, API-based account lifecycle management, and infrastructure as code concepts such as Terraform is preferred.

• Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks, along with relevant certifications, is preferred.

🏝️ Benefits

• Compensation for after-hours on-call rotation is not specified.