Sr. Systems Administrator - Entra Interface

Provide senior-level administration and governance of Microsoft Entra identity services, ensuring secure identity lifecycle management, access governance, and application authentication across Microsoft 365 environments. This role plays a critical function in securing access to Copilot and AI services by enforcing identity controls and preventing unauthorized access or identity sprawl.

Preferred location with hybrid work schedule:
Kansas City, KS

• Administer access lifecycle for cloud identities within Microsoft Entra, including access provisioning, deprovisioning, and role-based access control after synchronization from on-prem Active Directory
• Manage Microsoft Entra application registrations and enterprise applications, including permissions, consent, and ownership governance
• Oversee certificate and client secret lifecycle management for cloud-based applications and integrations
• Partner with the Identity team to support and maintain the AD sync utility tool, ensuring reliable and accurate synchronization of identities to Microsoft 365
• Monitor and validate identity synchronization outcomes, troubleshooting sync issues and data inconsistencies between on-prem AD and Entra
• Design and enforce Conditional Access policies and authentication controls to secure access to Microsoft 365 resources
• Conduct access reviews and enforce least-privilege access across cloud applications and services
• Manage identity governance capabilities including entitlement management, access packages, and automated access assignments
• Evaluate and secure identity configurations supporting Microsoft 365, Copilot, and AI-enabled services
• Review and control application permissions to prevent excessive or inappropriate access to organizational data
• Support secure authentication and authorization scenarios for Copilot, AI agents, and integrated applications
• Identify, assess, and remediate identity-related risks, including excessive permissions, stale accounts, and misconfigurations
• Serve as Tier 3 escalation point for Entra identity and access issues
• Collaborate with security, compliance, IAM, and application teams to align cloud identity governance with enterprise standards
• Develop and maintain documentation, standards, and operational procedures specific to cloud identity and access management
• Perform other duties as assigned

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent combination of education and experience)
• 5-8 years of Microsoft 365 or identity platform experience
• Experience with Entra , conditional access, and application security
• Experience with Microsoft Entra  identity governance frameworks
• Strong understanding of identity and access management principles
• Ability to manage complex identity environments at scale
• Strong analytical, troubleshooting, and communication skills
• Ability to translate technical concepts into clear, business-friendly guidance
• Strong documentation, communication, and collaboration skills
• Ability to work independently with minimal day-to-day direction while partnering effectively across teams
• Able to travel 5-15% of the time

An Equal Opportunity Employer including Disabled/Veterans