System Engineer

Overview

We're working with a global organization looking for a Systems Engineer who will act as the Senior Identity & Access Management Engineer and lead the administration, security, and continuous improvement of enterprise identity platforms. This role is heavily focused on Microsoft Entra ID and Active Directory , with responsibility for modernizing identity infrastructure, strengthening privileged access, and supporting enterprise security initiatives.

Key Responsibilities

• Manage and support Microsoft Entra ID, Active Directory, and Okta environments.
• Lead identity infrastructure initiatives, including Active Directory tiering and control plane security.
• Configure and maintain Conditional Access, Privileged Identity Management (PIM), RBAC, MFA, SSO, and identity governance.
• Administer Active Directory, DNS, Group Policy, Organizational Units, FSMO roles, and disaster recovery.
• Support Microsoft Intune, endpoint management, and PowerShell automation.
• Design and support Okta integrations and enterprise identity solutions.
• Collaborate with infrastructure and security teams to improve identity security and operational efficiency.

Required Experience

• Extensive Identity & Access Management experience.
• Strong hands-on expertise with Microsoft Entra ID (essential).
• Strong Active Directory administration experience within enterprise environments.
• Experience with Conditional Access, PIM, RBAC, SAML, OAuth, OIDC, MFA, and SSO.
• Strong PowerShell scripting skills.
• Experience with CyberArk (required).

Nice to Have

• Okta administration and application integrations.
• Microsoft Intune and Windows Server administration.
• Rubrik experience.
• Microsoft, Azure, Okta, or CyberArk certifications.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or equivalent experience.

Travel

• Up to 10% travel as required.

Key Technologies

Microsoft Entra ID, Active Directory, CyberArk, Okta, Intune, Windows Server, PowerShell, Conditional Access, PIM, MFA, SSO, SAML, OAuth, OIDC, RBAC, DNS, Group Policy.