IT Specialist - SR. IT Specialist - Microsoft Entra & Active Directory Specialist

Who We Are:

Our team, the Cloud Services team within the Information Technology Center, is responsible for Entra  (formerly Azure)/M365 cloud services and Active Directory for the Enterprise. The team provides support and implementation services to the entire organization's IT infrastructure.

• Combines strategic identity modernization with senior-level operational support.
• Will lead multiple identity modernization projects in parallel while serving as the escalation point for complex identity issues that require deep troubleshooting expertise.
• Architect and implement Conditional Access, MFA, SSO, and Zero Trust policies.
• Lead identity lifecycle automation and governance, design secure integrations using OAuth, SAML, and OpenID Connect, and harden privileged access with PIM, PAM, and tiered administration.
• Evaluate and modernize legacy identity components such as ADFS and on-premises IAM tooling, manage and execute multiple identity modernization projects simultaneously, and serve as the senior escalation point for complex identity-related helpdesk tickets.
• Collaborate across IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve complex issues related to AD, Entra , ADFS, PKI, certificates, and cloud identity.

• Provide expert support for Active Directory and Entra  managing accounts, groups, group policies, and directory synchronization across hybrid identity infrastructures.
• Architect, configure, and support Conditional Access, MFA, SSO, and Zero Trust access policies in Entra .
• Implement and support secure app integrations using OAuth, SAML, and OpenID Connect, including app/enterprise applications, and associated claims and access policies.
• Manage and troubleshoot ADFS and other legacy or transitional identity components to maintain secure access to enterprise and cloud resources.
• Plan and guide migrations away from legacy patterns where appropriate.
• Serve as the senior escalation point for identity-related helpdesk tickets, including advanced account provisioning problems, access failures, directory synchronization issues, and application sign-in problems.
• Mentor and support junior administrators and helpdesk staff, etc.
• Conduct regular audits of Active Directory and Entra  to detect, address, and mitigate potential security vulnerabilities.
• Create and maintain documentation related to processes, configurations, and governance policies.

• Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 6 years of professional level experience, a high school education or equivalent with related certifications will be considered.
• Relevant Microsoft Certifications are preferred.
• 2+ years:
  Experience managing enterprise identity platforms, including Active Directory Domain Services and Entra  (Azure AD), in hybrid environments. Demonstrated experience with Conditional Access, MFA, and SSO design and support.
• Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads.
• Hands-on experience with Active Directory Federation Services (AD FS) and familiarity with Public Key Infrastructure (PKI) systems, including creating, renewing, and troubleshooting certificates.
• Technical Certifications such as Microsoft Certified Solutions Associate (MCSA) and/or Microsoft Certified Solutions Expert (MCSE) or Microsoft Certified:
  Azure Administrator Associate, Azure Fundamentals or equivalent are preferred.
• A valid/clear driver's license is required.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen. Job Location s:
San Antonio, Texas