Junior IT Administrator – Identity & Access Management; IAM

We are seeking a Junior IT Administrator to support the daily operations, administration, and maintenance of enterprise identity and access management (IAM) systems. This entry‑level position will work with Microsoft Entra, Active Directory, Active Directory Lightweight Directory Services (AD-LDS), and Active Directory Federation Services (ADFS) to support secure authentication, authorization, and identity management across the organization.

The Junior IT Administrator will handle routine IAM service requests, troubleshoot authentication and access issues, support application integration reviews, and assist with identity governance activities. This role works closely with application teams, security personnel, and other technology stakeholders to ensure identity solutions follow established security standards, approval processes, and least‑privilege principles.

The ideal candidate will have foundational experience in IT operations, systems administration, or technical support, along with an understanding of Active Directory, authentication technologies, and IAM best practices. Success in this position requires strong troubleshooting skills, attention to detail, effective communication, and the ability to recognize when issues require escalation.

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short‑Term and Long‑Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: 70k-100k

** Can be 100% remote in TX, VA, MD, DC, or FL**

** High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)**

• Administer and support enterprise identity and access management systems, including Microsoft Entra, Active Directory, AD-LDS, and ADFS.

• Provision, modify, and deprovision service principals in Microsoft Entra according to established standards and approval workflows.

• Create and manage Microsoft Entra Enterprise Applications, including sign‑on configurations, application ownership, and user or group assignments.

• Review and assign API permissions while ensuring access follows least‑privilege principles and established approval requirements.

• Coordinate with secrets management teams to track and renew client secrets and certificates before expiration.

• Review new application requests for alignment with IAM security standards and best practices.

• Evaluate application authentication and integration requirements, identifying technical dependencies, security concerns, and potential gaps.

• Assess application support for authentication protocols, including OpenID Connect (OIDC), SAML, and Integrated Windows Authentication.

• Review application user provisioning and deprovisioning methods, including SCIM, Just‑In‑Time provisioning, and manual processes.

• Identify excessive or unsupported application permissions and document findings for governance review.

• Provide technical information and recommendations to support application governance and integration decisions.

• Respond to IAM consultation requests and provide guidance regarding Microsoft Entra, Active Directory, and AD‑LDS services.

• Research and document security group information, including ownership, membership, naming conventions, and descriptions.

• Perform routine administration of service principals, service accounts, and security groups when automated processes are unavailable.

• Investigate and troubleshoot identity synchronization issues between Microsoft Entra and Active Directory.

• Guide users and application teams through established IAM request and intake procedures.

• Troubleshoot recurring Active Directory account lockouts and identify potential sources of…