Associate IT Specialist - IT Specialist - Microsoft Entraid & Active Directory Administrator

32-00697

Our team, the Cloud Services team within the Information Technology Center, is responsible for Entra  (formerly Azure)/M365 cloud services and Active Directory for the Enterprise. The team provides support and implementation services to the entire organization's IT infrastructure.

• Manage daily identity operations for Active Directory and Entra , including account and group management, policy updates, authentication and access troubleshooting, system health monitoring, and contributing to identity modernization and process improvements.
• Manage elevated helpdesk requests related to account and access management, critical patching, and mobile device/application management (MDM/MAM).
• Implement and maintain Group Policies, Conditional Access, ADFS and SSO configurations, identity lifecycle and access governance processes, and mobile device/application management policies.
• Collaborate with IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve issues related to AD, Entra , ADFS, and cloud identity.

• Administer Active Directory accounts, groups, organizational units (OUs), and update Group Policies.
• Process staff transfer requests and ensure access is managed according to established procedures.
• Address elevated helpdesk tickets related to authentication, access, provisioning, and Azure/M365 sign-in issues, using established troubleshooting protocols.
• Maintain user and group memberships, license assignments, and application access settings in Entra .
• Monitor system alerts and logs.
• Manage ADFS by monitoring authentication activity, updating user access settings, and assisting with configuration changes as required.
• Manage Intune by deploying device management policies, enrolling devices, and maintaining application assignments for Windows and MacOS environments.
• Participate in vulnerability remediation efforts.
• Develop and maintain documentation, checklists and runbooks.

• Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 5 years of professional level experience, a high school education or equivalent with related certifications will be considered.
• 1-6 years:
  Experience managing enterprise identity platforms, including Active Directory Domain Services and Entra  (Azure AD), in hybrid environments.
• Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads.
• Familiarity with MFA, Conditional Access, SSO, and exposure to ADFS or other federation technologies is preferred.
• Experience with Intune or similar MDM/MAM platforms and basic patch management is a plus.
• Technical Certifications such as Microsoft Certified Solutions Associate (MCSA) and/or Microsoft Certified Solutions Expert (MCSE) or Microsoft Certified:
  Azure Administrator Associate, Azure Fundamentals or equivalent are preferred.
• A valid/clear driver's license is required.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.

For benefits information at our San Antonio location,  .
For benefits information at all other locations,  .

An Equal Employment Opportunity

Employer:

race, color, religion, sex, national origin, disability, and veteran status.