Systems Engineer Infrastructure

Systems Engineer, Infrastructure

Location:

Houston, TX (Hybrid 4:1)

Reports To:

Manager, Identity and Access Management

Employment Type:

Full time

Work as a technical lead and subject matter expert in designing, architecting, implementing, operating, and maintaining access management solutions using Entra , Active Directory, and Okta.

• Proven expert knowledge of Azure Entra  such as Conditional Access Policies, Privileged Identity Manager and Application Registrations.
• Strong understanding of PIM and the assignment of roles/IAM permissions on Management Groups, Subscriptions, and Resources.
• Azure Infrastructure management including user accounts, groups, conditional policies, Intune management, mobile device management, and endpoint security.
• Strong understanding of app registration, enterprise apps, SPNs, and managed identities with least‑privileged administration for Microsoft Graph API permissions.
• Proficiency in multifactor authentication, SSPR, and WHfB.
• Power Shell scripting, automation, and scheduling skills when working with Azure data.
• Good understanding of Intune policies management and Autopilot.
• Stay abreast of the latest Entra , best practices, and security trends, and make recommendations for continuous improvement.
• Strong background in Active Directory across geographies with numerous domain controllers, AD sites, and a user base of 5000+.
• Strong understanding of DNS, GPOs, user object, and OU administration.
• Solid understanding of Microsoft Tiering, IAM, and PAM concepts.
• Strong knowledge of Windows Server operating systems from 2016 to 2025.
• Strong understanding of the FSMO roles for maintaining domain security and integrity.
• Strong understanding of delegating permissions across the domain OU structure.
• Solid understanding of domain recovery steps in the event of a disaster.
• Demonstrate knowledge of IAM concepts including identity federation, SSO, SAML, OAuth, OIDC, MFA, RBAC, and least privilege principles.
• Provide Okta subject‑matter expertise on application integration, IAM functionality, and Okta’s feature roadmap.
• Design and implement Okta platform configurations aligned with overall solution architecture and customer requirements.
• Drive and support customer application integrations into Okta‑based IAM solutions and troubleshoot technical issues before, during, and after integration.

• Bachelor’s degree in Computer Science, a related field, or equivalent education and/or experience.
• 2 years of relevant and progressive professional experience.
• Knowledge and experience of Cyber Ark advantageous.
• Knowledge and experience with Rubrik advantageous.
• Microsoft, Azure, or Okta certifications are highly beneficial.

Occasional travel (up to 10% of time).

• Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on the date of hire.
• Strong learning culture with ongoing development opportunities.
• Basic life and disability insurance.
• 401(k) plan with 6% company match.
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off.
• Paid parental leave.

TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances.