Systems Administrator

Worker Type

Regular

Job Description

Summary

We are seeking an experienced Identity and Systems Administrator / Analyst to support identity and access management, Windows infrastructure, endpoint management, and general systems administration activities.

This position will primarily focus on maintaining and improving identity and access controls, administering Okta, supporting role-based access control, and assisting with Active Directory and Windows Server environments. The environment is primarily Windows-based, with a smaller number of macOS and Linux systems.

The ideal candidate will have hands-on experience with Okta or a strong understanding of identity and access management concepts, including authentication, authorization, application access, group-based access, and role-based access control. Familiarity with Jamf is preferred but not required, and training may be provided.

Automated processes are already in place for user onboarding and offboarding. This role will support, maintain, and troubleshoot the identity systems and access controls surrounding those automated processes rather than manually performing routine account provisioning and deprovisioning.

Position Responsibilities

* Administer and support identity and access management solutions, including Okta.

* Maintain application assignments, access policies, groups, roles, and authentication requirements.

* Configure and support role-based access control based on job responsibilities, business requirements, and least-privilege principles.

* Support single sign-on, multifactor authentication, federation, and application integrations.

* Troubleshoot authentication, authorization, account synchronization, application access, and provisioning-related issues.

* Monitor and support automated identity lifecycle processes, including identifying and resolving workflow, synchronization, or access assignment failures.

* Review identity and access configurations for consistency, security, and compliance.

* Participate in periodic access reviews, entitlement reviews, and audit activities.

* Work with internal teams to identify access requirements and translate those requirements into appropriate roles, groups, and permissions.

* Assist with the administration and maintenance of Active Directory, including users, groups, organizational units, delegation, permissions, and Group Policy.

* Support Windows Server environments and related infrastructure services.

* Administer and troubleshoot file-sharing systems, shared folders, access permissions, and security groups.

* Support a primarily Windows-based endpoint environment, with limited macOS and Linux systems.

* Assist with macOS endpoint management through Jamf when needed.

* Use ticketing systems to document, track, prioritize, and resolve incidents, requests, and problems.

* Create and maintain technical documentation, standard operating procedures, troubleshooting guides, system diagrams, and configuration records.

* Assist with system upgrades, application integrations, testing, automation, and process improvements.

* Support security, compliance, and audit activities related to identity, access, endpoints, and systems administration.

* Collaborate with IT, security, application owners, and other technical teams to resolve issues and improve services.

Basic Qualifications (Required Skills & Experience)

* Degree in information technology, computer science, cybersecurity, or a related field is helpful but not required. Relevant professional experience may be considered in place of formal education.

* 5+ years of relevant experience in identity management, systems administration, IT operations, or a related field.

* Strong understanding of identity and access management principles.

* Experience administering Okta or a comparable identity management platform.

* Understanding of role-based access control, least privilege, group-based access, and access governance concepts.

* Experience supporting single sign-on and multifactor authentication.

* Experience troubleshooting identity synchronization, authentication, authorization, or application access issues.

* Experience with Microsoft Active Directory administration.

*…