Who We Are:Our team, the Cloud Services team within the Information Technology Center, is responsible for Entra ID (formerly Azure)/M365 cloud services and Active Directory for the Enterprise. The team provides support and implementation services to the entire organization's IT infrastructure.
Objectives of this Role: - Combines strategic identity modernization with senior-level operational support.
- Will lead multiple identity modernization projects in parallel while serving as the escalation point for complex identity issues that require deep troubleshooting expertise.
- Architect and implement Conditional Access, MFA, SSO, and Zero Trust policies.
- Lead identity lifecycle automation and governance, design secure integrations using OAuth, SAML, and OpenID Connect, and harden privileged access with PIM, PAM, and tiered administration.
- Evaluate and modernize legacy identity components such as ADFS and on-premises IAM tooling, manage and execute multiple identity modernization projects simultaneously, and serve as the senior escalation point for complex identity-related helpdesk tickets.
- Collaborate across IT teams (Cloud, Security, Networking, Applications, Help Desk) to resolve complex issues related to AD, Entra ID, ADFS, PKI, certificates, and cloud identity.
Daily and Monthly Responsibilities: - Provide expert support for Active Directory and Entra ID by managing accounts, groups, group policies, and directory synchronization across hybrid identity infrastructures.
- Architect, configure, and support Conditional Access, MFA, SSO, and Zero Trust access policies in Entra ID.
- Implement and support secure app integrations using OAuth, SAML, and OpenID Connect, including app/enterprise applications, and associated claims and access policies.
- Manage and troubleshoot ADFS and other legacy or transitional identity components to maintain secure access to enterprise and cloud resources.
- Plan and guide migrations away from legacy patterns where appropriate.
- Serve as the senior escalation point for identity-related helpdesk tickets, including advanced account provisioning problems, access failures, directory synchronization issues, and application sign-in problems.
- Mentor and support junior administrators and helpdesk staff, etc.
- Conduct regular audits of Active Directory and Entra ID environments to detect, address, and mitigate potential security vulnerabilities.
- Create and maintain documentation related to processes, configurations, and governance policies.
Requirements: - Requires a Bachelors degree in Information Technology or related degree field with relevant experience. In lieu of a Bachelors degree, 6 years of professional level experience, a high school education or equivalent with related certifications will be considered.
- Relevant Microsoft Certifications are preferred.
- 2+ years: Experience managing enterprise identity platforms, including Active Directory Domain Services and Entra ID (Azure AD), in hybrid environments. Demonstrated experience with Conditional Access, MFA, and SSO design and support.
- Experience troubleshooting complex authentication and authorization issues across on-premises and cloud workloads.
- Hands-on experience with Active Directory Federation Services (AD FS) and familiarity with Public Key Infrastructure (PKI) systems, including creating, renewing, and troubleshooting certificates.
- Technical Certifications such as Microsoft Certified Solutions Associate (MCSA) and/or Microsoft Certified Solutions Expert (MCSE) or Microsoft Certified: Azure Administrator Associate, Azure Fundamentals or equivalent are preferred.
- A valid/clear driver's license is required.
Special Requirements:Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Job Locations: San Antonio, TexasFor benefits information at our San Antonio location, click here .
For benefits information at all other locations, click here .
An Equal Employment Opportunity Employer: race, color, religion, sex, national origin, disability, and veteran status.
Never miss an opportunity! Create an alert based on the job you applied for.
