Systems Administrator

JOB TITLE:

SYSTEMS ADMINISTRATOR

JOB LOCATION:

WASHINGTON, DC WAGE RANGE*:  PER HOUR JOB NUMBER: SAIJP

REQUIRED EXPERIENCE:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Equivalent work experience may also be considered.
• 5+ years of hands-on experience in Identity and Access Management (IAM) with a strong focus on Active Directory, Azure AD, and Okta administration.
• Proficient in Active Directory (AD) administration, including Group Policy, Active Directory Federation Services (ADFS), and AD sites/replication.
• Strong experience managing and administering Azure Active Directory (Azure AD), including Azure AD Connect, Conditional Access, and Azure AD B2C.
• Expertise in Okta configuration, including SSO, MFA, Lifecycle Management, and API Access Management.
• Proficient in using Power Shell for automation and management of AD and Azure AD environments.
• Knowledge of IAM-related protocols like SAML, OAuth, OpenID Connect, and LDAP.

JOB DESCRIPTION
• Administer and manage on-premises Active Directory environment, ensuring it is secure, highly available, and properly configured.
• Oversee Group Policy Objects (GPOs), Trusts, DNS, AD Sites and Services, and other AD components.
• Perform user provisioning and de-provisioning, ensuring the application of best practices for Active Directory security (e.g., least privilege, proper account permissions, password policies).
• Implement and manage Active Directory Federation Services (ADFS) for authentication and federation with cloud and external resources.
• Manage Azure Active Directory (Azure AD) for cloud-based identity management, including the integration of on-premises AD with Azure AD using Azure AD Connect.
• Administer Azure AD conditional access policies, ensuring secure and compliant access to cloud applications and resources.
• Implement and configure Azure AD B2C (Business-to-Consumer) for user authentication in external-facing applications.
• Manage Azure AD Connect, including troubleshooting, synchronization, and ensuring proper user identity lifecycle management.
• Oversee the administration and integration of Okta for identity management, single sign-on (SSO), and multi-factor authentication (MFA) solutions.
• Ensure the seamless integration of Okta with internal and third-party applications (e.g., Office 365, Salesforce, Google Workspace).
• Manage and configure Okta Universal Directory, Lifecycle Management, and API Access Management.
• Monitor the health and performance of AD, Azure AD, and Okta environments, proactively addressing any issues or potential vulnerabilities.
• Develop and maintain Power Shell scripts for automating common tasks related to Active Directory, Azure AD, and Okta.
• Create and maintain comprehensive documentation for all identity management systems and processes. Preferred:
• Certs:
Microsoft Certified:
Azure Solutions Architect, Okta Certified Administrator, or other relevant IAM/security certifications.
• Experience with Identity Governance tools like SailPoint or Saviynt.
• Familiarity with cloud platforms (e.g., AWS, Google Cloud) and their IAM services.
• Exposure to Dev Ops practices and how IAM can be integrated into CI/CD pipelines. Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities
* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits;

dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.