IT Operations Lead (Microsoft Entra ID)

Location: Remote - United States

Annual base salary: $131,000–$163,000 USD, excluding discretionary bonus; equity is available.

Company

hirify.global provides cybersecurity threat hunting, detection, and remediation technology for commercial customers, founded by former NSA cyber operations experts and operating in hyper-growth mode.

What you will do

• Lead IT execution by translating CSTO strategy into projects, sequencing work, assigning tasks, tracking delivery, removing blockers, and reporting risks.
• Directly lead and mentor the IT Administrator and other IT staff while remaining hands-on as the final escalation point for identity, endpoint, and SaaS incidents.
• Own Microsoft Entra ID architecture, privileged access, Conditional Access, authentication, passwordless and phishing-resistant MFA, PIM, break-glass accounts, delegated administration, and identity lifecycle automation.
• Manage SSO, enterprise applications, SAML/OIDC federation, SCIM provisioning, device identity, external access, standard-access catalogs, and integrations across Entra ID, Auth0, Microsoft 365, and business systems.
• Implement and evidence CMMC Level 2 and SOC 2 Type 2 technical controls, remediate corporate security findings, monitor identity threats, analyze audit logs, and write KQL detections and dashboards.
• Set standards for Intune, Jamf, Datto RMM, SaaS platforms, Atlassian, AI tools, cloud and engineering access, corporate infrastructure vendors, labs, VDI, and Datto RMM deployment of the Blackpoint agent.
• Build auditable automation with Microsoft Graph, PowerShell, Power Automate, and Python for provisioning, offboarding, license assignment, group governance, and reporting.

Requirements

• 7–10+ years in systems engineering, identity engineering, or senior IT infrastructure, including at least 4 years of deep hands-on Microsoft Entra ID experience in a production tenant.
• Expert-level Conditional Access, PIM, authentication methods, app registrations, enterprise applications, and SAML/OIDC federation experience.
• Hands-on Entra ID P2 experience with Identity Protection, access reviews, and entitlement management.
• Strong Microsoft Graph API and PowerShell automation skills; working KQL and sign-in/audit-log analysis knowledge; familiarity with identity threat detection.
• Broad Microsoft expertise including Microsoft 365 administration, Defender, and Azure fundamentals.
• Experience implementing and evidencing technical controls for CMMC Level 2, NIST 800-171/800-53, SOC 2, or ISO 27001.
• Experience administering Jira, Jira Service Management, and Confluence, and building Power Automate or similar workflows.
• Fleet-scale Intune experience; clear written communication and strong documentation of decisions and designs.
• Proven strategy execution, project delivery, cross-functional completion, informal leadership, mentoring, and escalation ownership; formal people management is not required.
• Motivation to grow into management while staying hands-on, with independent problem-solving and the ability to unblock and develop others.
• Comfort working remotely in a high-ownership, fast-growing environment.

Nice to have

• Python or Bash automation.
• Jamf and macOS management; Datto RMM or another RMM platform.
• Auth0 and SCIM-based provisioning experience beyond Entra.
• Microsoft SC-300, MS-102, AZ-500, or SC-200 certification; at least one is strongly preferred.
• Experience in a security vendor or MSP, or in CMMC, FedRAMP, or federal-contracting environments.
• Infrastructure-as-code or configuration-as-code for Entra and Intune, such as Microsoft365DSC or Terraform.

Culture & Benefits

• Remote role supporting approximately 230 employees across a distributed workforce.
• High-ownership, fast-growing environment with an emphasis on repeatable, auditable systems and measurable delivery.
• US-eligible employees receive health, vision, dental, and life insurance, a 401(k), and discretionary time off.
• International employees receive benefits according to local market standards and applicable country requirements.
• Equity participation is available globally, with details varying by location and employment structure.