System Engineer - Identity & Access Management

Key Responsibilities

• Own the design, administration, and continuous improvement of Entra ID (Azure AD) and on-premises Active Directory, including user lifecycle (Joiner-Mover-Leaver), group architecture, and directory synchronization.

• Design and manage group policies, MFA, and authentication controls; lead troubleshooting of complex identity and access issues.

• Drive access provisioning and identity governance practices, including entitlement design, role-based access control (RBAC), least-privilege enforcement, and access certification/recertification campaigns.

• Contribute to segregation of duties (SoD) analysis, audit readiness, and access attestation processes.

• Partner with security teams to advance Zero Trust initiatives, identity protection, and compliance controls; act as an IAM subject matter expert in cross-functional security discussions.

• Help evaluate, pilot, and support the onboarding of Saviynt as our IGA platform, shaping how identity governance workflows evolve.

Messaging & Collaboration (Supporting Scope)

• Administer Exchange Online, hybrid mail flow, and Microsoft Teams, including distribution lists, shared mailboxes, and transport rules.

• Troubleshoot escalated issues related to mail delivery, Outlook, calendaring, and their integration with identity services.

Operations, Reliability, and Incident Management

• Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring timely communication and adherence to SLAs.

• Lead or participate in on-call rotation and major incident response as a senior escalation point.

• Drive root cause analysis and problem management, translating recurring issues into permanent fixes and system improvements.

Automation and AI-Driven Process Improvement

• Design and maintain PowerShell scripts and automation workflows (including Microsoft Graph API) that streamline identity and access operations end-to-end.

• Champion an automation-first approach, identifying manual processes across identity platform operations that can be eliminated or self-serviced.

• Leverage AI-powered tools such as Microsoft Copilot, scripting assistants, and workflow automation platforms to accelerate troubleshooting, generate scripts, improve documentation, and surface operational insights.

• Apply AI to enhance identity governance activities such as access reviews, anomaly detection, and reporting.

User Experience and Continuous Improvement

• Partner with service desk, endpoint, and security teams to resolve identity and access issues and elevate the overall user experience.

• Analyze recurring access and authentication trends; build knowledge base content and self-service capabilities to reduce ticket volume.

• Mentor junior team members on identity concepts, tooling, and troubleshooting methodology.

Qualifications :

• 3–5+ years of experience supporting enterprise Microsoft environments, with hands-on experience in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
• Strong troubleshooting skills across identity, authentication, and messaging services.
• Solid understanding of directory services, group policies, DNS, and access control models.
• Basic scripting experience with PowerShell is required.

Required Qualifications

• 5+ years of experience supporting enterprise Microsoft identity environments, with hands-on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.

• Advanced troubleshooting skills across identity, authentication, and access management.

• Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).

• Proficient in automation & scripting with PowerShell, AI agents using Copilot & Claude, including experience with Microsoft Graph API/SDK for automation.

• Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.

• Open to a US shift

Preferred Qualifications

• Experience with identity governance concepts or platforms (e.g., Saviynt, SailPoint, Okta IGA, CyberArk) — access certifications, entitlement management, SoD.

• Familiarity with Microsoft Defender for Office 365 and broader identity-related security controls.

• Experience with audit, compliance, or access to attestation processes (e.g., SOX controls).

• Experience with ITSM platforms such as ServiceNow.

• Experience using AI tools and developing agents (e.g., Microsoft Copilot) to improve operational efficiency and automation.

• Microsoft certifications in Azure or Microsoft 365 (e.g., SC-300, MS-102) are a plus.

What awaits you if you consider this opportunity?

• Guaranteed 14th-month pay
• Profit share
• Retirement package as early as 5 years
• Health cards for up to 3 dependents
• Taxable and non-taxable allowances
• Annual medicine reimbursements
• Remote work setup