Microsoft Identity & Directory Services Engineer

Job-:
Technology, E-Commerce & Data Science

Location:

Framingham, MA, United States Workplace:
On-site

Schedule:

Full time Posted:
Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer-centric, results-oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer-centric technology services.

The Technical Analyst, Identity and access management is a senior technical contributor responsible for the design, implementation, administration, security, automation, and continuous improvement of enterprise directory and identity management platforms. You will support Microsoft Entra , Active Directory, authentication and authorization services, identity governance, and privileged access solutions. In this highly collaborative role, you will help keep directory services secure, resilient, and highly available while advancing modernization, Zero Trust, and operational excellence across the identity ecosystem.

What you'll be doing:

Design, implement, administer, and support enterprise Microsoft Entra  Active Directory environments for reliability, security, and scalability.

Manage users, groups, organizational units, service accounts, Group Policy, replication, trusts, and identity lifecycle processes.

Develop and maintain Conditional Access policies, multi-factor authentication controls, passwordless authentication solutions, and identity protection capabilities aligned with Zero Trust principles.

Lead troubleshooting and root cause analysis for complex directory, authentication, authorization, and access management issues.

Build and maintain automation using Power Shell, Microsoft Graph API, and related technologies to improve efficiency, consistency, and service quality.

Contribute to Active Directory upgrades, tenant transformations, migrations, governance enhancements, and hybrid identity initiatives.

Integrate identity services with cloud, SaaS, and enterprise applications using modern authentication protocols and security standards.

Monitor service health, performance, capacity, operational metrics, and security posture, driving remediation and continuous improvement.

Administer identity governance capabilities, including access reviews, entitlement management, lifecycle workflows, role-based access controls, and privileged access management.

Create technical standards, engineering documentation, operational procedures, and best practices.

Evaluate emerging identity and security technologies and recommend solutions that strengthen security, operations, and user experience.

Mentor junior team members, serve as an escalation point, and lead small technical projects or work streams.

What you bring to the table:

Strong analytical and problem-solving skills with the ability to diagnose complex technical issues and implement lasting solutions.

Initiative and accountability for delivering secure, reliable, high-quality technology solutions.

Ability to prioritize multiple assignments and competing needs in a dynamic environment.

Strong collaboration and relationship-building skills across technical and business teams.

Excellent written and verbal communication skills, including the ability to translate technical concepts for varied audiences.

A continuous learning mindset and interest in identity management, cybersecurity, automation, and cloud technologies.

What's needed

- Basic Qualifications:

2+ years of experience administering Microsoft Active Directory Domain Services, Microsoft Entra , and hybrid identity solutions.

Experience managing Active Directory operations, including object lifecycle administration, replication, Group Policy, trusts, and directory services.

Experience with Conditional Access, MFA, Zero Trust identity controls, identity governance, role-based access controls, access reviews, entitlement management, and lifecycle workflows.
3+ years of experience with Power Shell scripting, automation, Microsoft Graph API integrations, and systems integration.

Experience supporting modern authentication and identity protocols, including OAuth, OpenID Connect, SAML, DNS, LDAP/LDAPS, Kerberos, and TCP/IP.5+ years of experience supporting enterprise identity, infrastructure, cloud, or directory services environments.

Bachelor's degree in Computer Science, Information Technology,…