AD/ICAM Systems Administrator

Job#: 2083676

Job Description:

Apex Systems is seeking a AD/ICAM Systems Administrator to work onsite in Washington, D.C.

Responsibilities:

Administer and manage on-premises Active Directory environment, ensuring it is secure, highly available, and properly configured.

Oversee Group Policy Objects (GPOs), Trusts, DNS, AD Sites and Services, and other AD components.

Perform user provisioning and de-provisioning, ensuring the application of best practices for Active Directory security (e.g., least privilege, proper account permissions, password policies).

Implement and manage Active Directory Federation Services (ADFS) for authentication and federation with cloud and external resources.

Manage Azure Active Directory (Azure AD) for cloud-based identity management, including the integration of on-premises AD with Azure AD using Azure AD Connect.

Administer Azure AD conditional access policies, ensuring secure and compliant access to cloud applications and resources.

Implement and configure Azure AD B2C (Business-to-Consumer) for user authentication in external-facing applications.

Manage Azure AD Connect, including troubleshooting, synchronization, and ensuring proper user identity lifecycle management.

Oversee the administration and integration of Okta for identity management, single sign-on (SSO), and multi-factor authentication (MFA) solutions.

Ensure the seamless integration of Okta with internal and third-party applications (e.g., Office 365, Salesforce, Google Workspace).

Manage and configure Okta Universal Directory, Lifecycle Management, and API Access Management.

Monitor the health and performance of AD, Azure AD, and Okta environments, proactively addressing any issues or potential vulnerabilities.

Develop and maintain PowerShell scripts for automating common tasks related to Active Directory, Azure AD, and Okta.

Create and maintain comprehensive documentation for all identity management systems and processes.

Qualifications:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Equivalent work experience may also be considered.

5+ years of hands-on experience in Identity and Access Management (IAM) with a strong focus on Active Directory, Azure AD, and Okta administration.

Proficient in Active Directory (AD) administration, including Group Policy, Active Directory Federation Services (ADFS), and AD sites/replication.

Strong experience managing and administering Azure Active Directory (Azure AD), including Azure AD Connect, Conditional Access, and Azure AD B2C.

Expertise in Okta configuration, including SSO, MFA, Lifecycle Management, and API Access Management.

Proficient in using PowerShell for automation and management of AD and Azure AD environments.

Knowledge of IAM-related protocols like SAML, OAuth, OpenID Connect, and LDAP.

Familiarity with security best practices in identity management, including multi-factor authentication (MFA) and role-based access control (RBAC).

Ability to analyze and resolve complex IAM issues, including authentication, access, and security problems.

Strong verbal and written communication skills, capable of explaining complex technical issues to both technical and non-technical stakeholders.

Ability to work cross-functionally with other teams, such as security, network, and applications teams, to address identity management challenges.

Must have avility to obtain Public Trust; Current Public Trust highly preferred

Preferred:

Certs: Microsoft Certified: Azure Solutions Architect, Okta Certified Administrator, or other relevant IAM/security certifications.

Experience with Identity Governance tools like SailPoint or Saviynt.

Familiarity with cloud platforms (e.g., AWS, Google Cloud) and their IAM services.

Exposure to DevOps practices and how IAM can be integrated into CI/CD pipelines.

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.