IT Systems Engineer – IAM, Cloud Infrastructure

Role Overview

• Administer Microsoft Entra ID (Azure AD) including users, groups, roles, MFA, conditional access, and lifecycle workflows.
• Implement, maintain, and troubleshoot SAML 2.0 and OIDC SSO integrations with third-party and internal applications.
• Manage SCIM provisioning for automated user and group lifecycle management: Attribute mapping and transformation Group/role assignments Deprovisioning and access enforcement Support onboarding/offboarding processes with a strong emphasis on least privilege and auditability.
• Provide operational support for Microsoft Azure and Google Cloud Platform (GCP) environments.
• Assist with administration of compute, storage, networking, and identity‑integrated services.
• Monitor system health, respond to alerts, and support incident resolution.
• Perform routine maintenance, configuration changes, and service improvements.
• Manage endpoints using Microsoft Intune and Apple Business Manager (ABM) for: Windows 10/11 devices Android devices macOS, iOS, and iPadOS devices Deploy and maintain Configuration profiles and compliance policies Security baselines and encryption requirements Application deployment and update strategies Troubleshoot device enrollment, policy conflicts, and compliance issues.
• Assist with maintaining compliance with: ISO 27001 ISO 43001 GDPR SOC 2 Type II Support audit preparation by providing evidence, access documentation, and procedural updates.
• Follow and enforce security policies related to identity, devices, and cloud infrastructure.
• Act as an escalation point for complex IAM, SSO, MDM, and cloud issues.
• Participate in after‑hours or off‑hours support as needed for: System outages Identity or integration failures Planned maintenance or critical changes.

Requirements

• Bachelor's degree in computer science, information technology or related field, or the equivalent combination of education, training, and experience.
• 3–5 years of experience in IT systems administration, systems engineering, or cloud operations.
• Hands‑on experience with Microsoft Entra ID (Azure AD).
• Practical experience implementing and supporting SAML SSO and SCIM provisioning.
• Working knowledge of Azure and GCP infrastructure concepts.
• Experience managing devices with Intune and Apple Business Manager (ABM).
• Familiarity with security controls, audits, and documentation related to SOC 2, ISO, and GDPR.
• Strong troubleshooting skills and the ability to clearly document systems and procedures.
• Strong communication and collaboration skills to work across cross-functional teams.

Tech Stack

• Android
• Azure
• Cloud
• Google Cloud Platform
• iOS
• MacOS

Benefits

• Group Medical, Dental, Vision and Life insurance
• 401k
• Unlimited Vacation
• Paid Sick Leave & Holidays