Overview
On Site
Full Time
Skills
PRT
SSO
Multi-factor Authentication
Domain Controllers
Python
Bash
Reporting
RBAC
Help Desk
Roadmaps
End-user Training
Workflow
IT Security
Active Directory
Replication
Provisioning
Scripting
Windows PowerShell
Management
Security+
CISSP
Federated Identity
SAML
OAuth
Microsoft
Migration
Identity Management
Auditing
Regulatory Compliance
Sarbanes-Oxley
HIPAA
ISO/IEC 27001:2005
Authentication
.NET
Java
Cloud Computing
Microsoft Azure
Amazon Web Services
Google Cloud
Google Cloud Platform
IT Service Management
Innovation
Collaboration
Recruiting
Insurance
Finance
Professional Development
Training
Leadership
CompTIA
Customer Service
Career Counseling
Apex
Oracle Application Express
Job Details
Job#: 3009943
Job Description:
POSITION SUMMARY
Apex Systems is seeking a seasoned and proactive IAM Platform Administrator to lead the design, integration, and operational support of our enterprise-wide Identity and Access Management (IAM) ecosystem. This role is critical in shaping and maintaining a secure, scalable identity architecture across hybrid environments - spanning on-premises Active Directory, Microsoft Entra ID, and federated cloud services (Azure, AWS, M365, and more).
You will play a key role in implementing modern identity solutions, enabling seamless authentication, secure access, and governance aligned with zero trust principles.
KEY RESPONSIBILITIES
In addition to other occasional tasks, the candidate's key responsibilities will be:
Design and maintain identity architecture across on-premises AD, Microsoft Entra ID, and federated cloud platforms (Azure, AWS, M365).
Implement and manage hybrid identity solutions, including seamless SSO, passwordless authentication, and conditional access policies.
Automate identity lifecycle processes (provisioning, deprovisioning, role transitions) using PowerShell, Microsoft Graph, and Entra ID Governance.
Integrate third-party applications with Entra ID using SAML, OAuth2, and OpenID Connect protocols.
Monitor and troubleshoot authentication flows, device join states, token issuance (PRT), and MFA challenges.
Administer and support IAM components, including SSO, MFA, conditional access, and self-service password reset.
Manage user lifecycle operations (Joiner-Mover-Leaver) across AD, Entra ID, and Okta, ensuring accurate role-based access.
Provide production-level support for Active Directory infrastructure, including domain controllers, replication, trust relationships, and GPOs.
Design and maintain automation scripts (PowerShell, Python, Bash) for bulk provisioning, reporting, and account cleanup.
Collaborate with security and compliance teams to enforce least privilege, RBAC, and Just-In-Time access models.
Monitor IAM systems for performance issues, outages, and anomalies, and respond swiftly to incidents.
Collaborate with IT and helpdesk teams to resolve authentication and access-related issues.
Document and maintain SOPs, escalation ladders, and architectural diagrams for identity services.
Stay current on evolving identity threats, zero trust architecture, and Microsoft roadmap updates.
Develop and deliver user training and support for IAM tools and workflows.
MINIMUM QUALIFICATIONS
10+ years of hands-on experience in IAM, IT security, or infrastructure administration.
Deep expertise in Microsoft Entra ID (Azure AD) and Okta, including hybrid identity, federation, and synchronization.
Strong proficiency in Active Directory administration, including GPOs, replication, and domain controller management.
Proven experience managing access via roles, groups, and entitlements across web, cloud, and service-based environments.
Skilled in lifecycle operations: provisioning, updates, suspension, and de-provisioning of identities.
Experience with IAM automation and scripting using PowerShell, Microsoft Graph, or similar tools.
Strong troubleshooting skills across IAM components and authentication protocols.
Demonstrated ability to detect and respond to IAM-related security incidents.
PREFERRED QUALIFICATION
Experience managing hybrid identity environments, integrating on-prem AD with cloud IAM platforms.
Certifications such as Security+, CISSP, Okta Certified Administrator, or Microsoft Entra Certified.
Familiarity with federated identity protocols (SAML, OAuth2, OpenID Connect).
Working knowledge of identity synchronization tools (e.g., Microsoft Entra Connect, Okta AD Agent).
Hands-on experience with IAM migration projects from on-prem to cloud.
Exposure to Identity Governance & Administration (IGA) and Privileged Access Management (PAM) solutions.
Experience generating audit and compliance reports aligned with SOX, HIPAA, ISO 27001.
Strong troubleshooting across multi-platform authentication (.NET, Java, cloud-native apps).
Understanding of cloud and on-prem security best practices (Azure, AWS, Google Cloud Platform).
Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.
Job Description:
POSITION SUMMARY
Apex Systems is seeking a seasoned and proactive IAM Platform Administrator to lead the design, integration, and operational support of our enterprise-wide Identity and Access Management (IAM) ecosystem. This role is critical in shaping and maintaining a secure, scalable identity architecture across hybrid environments - spanning on-premises Active Directory, Microsoft Entra ID, and federated cloud services (Azure, AWS, M365, and more).
You will play a key role in implementing modern identity solutions, enabling seamless authentication, secure access, and governance aligned with zero trust principles.
KEY RESPONSIBILITIES
In addition to other occasional tasks, the candidate's key responsibilities will be:
Design and maintain identity architecture across on-premises AD, Microsoft Entra ID, and federated cloud platforms (Azure, AWS, M365).
Implement and manage hybrid identity solutions, including seamless SSO, passwordless authentication, and conditional access policies.
Automate identity lifecycle processes (provisioning, deprovisioning, role transitions) using PowerShell, Microsoft Graph, and Entra ID Governance.
Integrate third-party applications with Entra ID using SAML, OAuth2, and OpenID Connect protocols.
Monitor and troubleshoot authentication flows, device join states, token issuance (PRT), and MFA challenges.
Administer and support IAM components, including SSO, MFA, conditional access, and self-service password reset.
Manage user lifecycle operations (Joiner-Mover-Leaver) across AD, Entra ID, and Okta, ensuring accurate role-based access.
Provide production-level support for Active Directory infrastructure, including domain controllers, replication, trust relationships, and GPOs.
Design and maintain automation scripts (PowerShell, Python, Bash) for bulk provisioning, reporting, and account cleanup.
Collaborate with security and compliance teams to enforce least privilege, RBAC, and Just-In-Time access models.
Monitor IAM systems for performance issues, outages, and anomalies, and respond swiftly to incidents.
Collaborate with IT and helpdesk teams to resolve authentication and access-related issues.
Document and maintain SOPs, escalation ladders, and architectural diagrams for identity services.
Stay current on evolving identity threats, zero trust architecture, and Microsoft roadmap updates.
Develop and deliver user training and support for IAM tools and workflows.
MINIMUM QUALIFICATIONS
10+ years of hands-on experience in IAM, IT security, or infrastructure administration.
Deep expertise in Microsoft Entra ID (Azure AD) and Okta, including hybrid identity, federation, and synchronization.
Strong proficiency in Active Directory administration, including GPOs, replication, and domain controller management.
Proven experience managing access via roles, groups, and entitlements across web, cloud, and service-based environments.
Skilled in lifecycle operations: provisioning, updates, suspension, and de-provisioning of identities.
Experience with IAM automation and scripting using PowerShell, Microsoft Graph, or similar tools.
Strong troubleshooting skills across IAM components and authentication protocols.
Demonstrated ability to detect and respond to IAM-related security incidents.
PREFERRED QUALIFICATION
Experience managing hybrid identity environments, integrating on-prem AD with cloud IAM platforms.
Certifications such as Security+, CISSP, Okta Certified Administrator, or Microsoft Entra Certified.
Familiarity with federated identity protocols (SAML, OAuth2, OpenID Connect).
Working knowledge of identity synchronization tools (e.g., Microsoft Entra Connect, Okta AD Agent).
Hands-on experience with IAM migration projects from on-prem to cloud.
Exposure to Identity Governance & Administration (IGA) and Privileged Access Management (PAM) solutions.
Experience generating audit and compliance reports aligned with SOX, HIPAA, ISO 27001.
Strong troubleshooting across multi-platform authentication (.NET, Java, cloud-native apps).
Understanding of cloud and on-prem security best practices (Azure, AWS, Google Cloud Platform).
Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.