IT System Administration – Senior​/Specialist

Keeping Washington Clean and Evergreen

The Department of Ecology is hiring an IT System Administration – Senior/Specialist within the Information Technology Security Services Office
.

• Headquarters Office in Lacey, WA.
• Upon hire, you must live within a commutable distance from the duty station.

• This position is eligible for telework and flexible schedule options.
• You may telework most of your work time with occasional in-person meetings and activities.
• Schedules are dependent upon position needs and are subject to change.

• Apply by September 09, 2026
• Applications submitted after the date above may not be reviewed unless additional qualified applicants are needed.

In this role, you will be the senior Identity and Access Management Administrator, with responsibilities for Windows Domain Controllers and cloud-based identity management platform, including Azure. You will be responsible for architecting and modernizing Ecology's Identity and Access Management strategy through the adoption of cloud-native technologies.

• Mentor and guide other Domain Administrators.
• Provide excellent customer service and collaborate with other teams to improve the security posture of Ecology's Identity and Access Management strategy.
• Communicate effectively with Management to articulate Ecology's strategy for modernizing Identity and Access Management.
• Assess the current Windows Domain Controller architecture and health and identify optimization opportunities.
• Assess the current Group Policy Objects architecture and health and identify opportunities to streamline.
• Assess and identify opportunities to improve the security posture of Ecology's Identity and Access Management strategy and infrastructure.
• Assess and plan the adoption of Intune based policy management.
• Design and plan the use of Azure technologies for cloud native Identity and Access Management.

For detailed information on how we calculate experience and responses to other frequently asked questions, please visit our Recruitment website.

• Seven years of experience and/or education related to the duties of the position, which must include the following:
  • Critical Thinking & Decision-Making – Proven track record evaluating risks, analyzing complex IAM, AD, DNS, and GPO issues, and making informed decisions to maintain secure and stable operations.
  • Security & Compliance – Demonstrated ability to apply and uphold security policies, governance requirements, and best practices to maintain compliant and secure identity, directory, and DNS environments.
  • Identity & Access Management Administration – Demonstrated ability to manage identity life cycles, authentication, permissions, and roles to ensure secure and efficient access control.
  • Active Directory & Entra – Proven track record configuring, maintaining, modernizing, and troubleshooting Active Directory and Azure Entra  ensure reliable identity and directory services.
  • Group Policy Architecture & Management – Demonstrated ability to design, implement, and troubleshoot GPOs to enforce secure configurations and agency-wide standards. Ability to translate GPO’s to Intune and Azure Policies.
  • DNS Administration & Architecture – Proven track record designing, implementing, securing, and troubleshooting on-premise and cloud DNS services to ensure accurate and reliable name resolution.
  • System Maintenance & Continuity Planning – Demonstrated ability to apply updates, monitor performance, and implement disaster recovery strategies to maintain secure and resilient IAM, AD, and DNS operations.
• Education involving a major study in Computer Science, Information Technology (IT), Science, Technology, Engineering, Mathematics (STEM), or closely related field.

This position…