Junior IT Administrator - Identity & Access Management; IAM

Position: Junior IT Administrator - Identity & Access Management (IAM)

We are seeking a Junior IT Administrator to support the daily operations, administration, and maintenance of enterprise identity and access management (IAM) systems. This entry-level position will work with Microsoft Entra, Active Directory, Active Directory Lightweight Directory Services (AD-LDS), and Active Directory Federation Services (ADFS) to support secure authentication, authorization, and identity management across the organization.

The Junior IT Administrator will handle routine IAM service requests, troubleshoot authentication and access issues, support application integration reviews, and assist with identity governance activities. This role works closely with application teams, security personnel, and other technology stakeholders to ensure identity solutions follow established security standards, approval processes, and least-privilege principles.

Key Responsibilities

• Administer and support enterprise identity and access management systems, including Microsoft Entra, Active Directory, AD-LDS, and ADFS.
• Provision, modify, and deprovision service principals in Microsoft Entra according to established standards and approval workflows.
• Create and manage Microsoft Entra Enterprise Applications, including sign-on configurations, application ownership, and user or group assignments.
• Coordinate with secrets management teams to track and renew client secrets and certificates before expiration.
• Review new application requests for alignment with IAM security standards and best practices.
• Evaluate application authentication and integration requirements, identifying technical dependencies, security concerns, and potential gaps.
• Assess application support for authentication protocols, including OpenID Connect (OIDC), SAML, and Integrated Windows Authentication.
• Review application user provisioning and deprovisioning methods, including SCIM, Just-In-Time provisioning, and manual processes.
• Identify excessive or unsupported application permissions and document findings for governance review.
• Provide technical information and recommendations to support application governance and integration decisions.
• Respond to IAM consultation requests and provide guidance regarding Microsoft Entra, Active Directory, and AD-LDS services.
• Research and document security group information, including ownership, membership, naming conventions, and descriptions.
• Perform routine administration of service principals, service accounts, and security groups when automated processes are unavailable.
• Investigate and troubleshoot identity synchronization issues between Microsoft Entra and Active Directory.
• Guide users and application teams through established IAM request and intake procedures.
• Troubleshoot recurring Active Directory account lockouts and identify potential sources of authentication failures.
• Investigate and resolve authentication issues involving user accounts, service accounts, and other non-human identities.
• Support troubleshooting of authentication technologies, including Yubi Key, HYPR, and Last Pass.
• Investigate authentication failures associated with Conditional Access policy evaluations.
• Assist with recovery of Active Directory user, group, and computer objects.
• Document service requests, incidents, troubleshooting activities, and resolutions in accordance with established procedures.
• Maintain compliance with organizational security policies, identity governance standards, and established change management procedures.

Qualifications

• Associate degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education, training, and experience.
• 1–3 years of experience in IT operations, technical support, service desk, systems administration, or a related technical role.
• Working…