IT Specialist - SR. IT Specialist - Microsoft Entra & Active Directory Specialist

Position: IT SPECIALIST - SR. IT SPECIALIST - Microsoft Entra ID & Active Directory Specialist
Who We Are:

Our team, the Cloud Services team within the Information Technology Center, is responsible for Entra  (formerly Azure)/M365 cloud services and Active Directory for the Enterprise. The team provides support and implementation services to the entire organization's IT infrastructure. Objectives of this Role:
Combines strategic identity modernization with senior-level operational support. Will lead multiple identity modernization projects in parallel while serving as the escalation point for complex identity issues that require deep troubleshooting expertise. Architect and implement Conditional Access, MFA, SSO, and Zero Trust policies. Lead identity lifecycle automation and governance, design secure integrations using OAuth, SAML, and OpenID Connect, and harden privileged access with PIM, PAM, and tiered administration.

Evaluate and modernize legacy identity components such as ADFS and on-premises IAM tooling, manage and execute multiple identity modernization projects simultaneously, and serve as the senior escalation point for complex identity-related helpdesk tickets. Collaborate across IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve complex issues related to AD, Entra , ADFS, PKI, certificates, and cloud identity. Daily and Monthly Responsibilities:
Provide expert support for Active Directory and Entra  managing accounts, groups, group policies, and directory synchronization across hybrid identity infrastructures. Architect, configure, and support Conditional Access, MFA, SSO, and Zero Trust access policies in Entra  and support secure app integrations using OAuth, SAML, and OpenID Connect, including app/enterprise applications, and associated claims and access policies. Manage and troubleshoot ADFS and other legacy or transitional identity components to maintain secure access to enterprise and cloud resources.

Plan and guide migrations away from legacy patterns where appropriate. Serve as the senior escalation point for identity-related helpdesk tickets, including advanced account provisioning problems, access failures, directory synchronization issues, and application sign-in problems. Mentor and support junior administrators and helpdesk staff, etc. Conduct regular audits of Active Directory and Entra  to detect, address, and mitigate potential security vulnerabilities. Create and maintain documentation related to processes, configurations, and governance policies.

Requirements:
Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 6 years of professional level experience, a high school education or equivalent with related certifications will be considered. Relevant Microsoft Certifications are preferred. 2+ years:
Experience managing enterprise identity platforms, including Active Directory Domain Services and Entra  (Azure AD), in hybrid environments. Demonstrated experience with Conditional Access, MFA, and SSO design and support. Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads. Hands-on experience with Active Directory Federation Services (AD FS) and familiarity with Public Key Infrastructure (PKI) systems, including creating, renewing, and troubleshooting certificates.

Technical Certifications such as Microsoft Certified Solutions Associate (MCSA) and/or Microsoft Certified Solutions Expert (MCSE) or Microsoft Certified:
Azure Administrator Associate, Azure Fundamentals or equivalent are preferred. A valid/clear driver's license is required.