Junior IAM Administrator (Microsoft Entra)

Location: Remote within the United States; role listed in Vienna, Virginia.

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

• Provision and de-provision service principals, service accounts, groups, and Enterprise Applications in Microsoft Entra.
• Configure sign-on settings, ownership, user and group assignments, API permissions, consent workflows, secrets, and certificate renewals.
• Evaluate application IAM integrations, authentication protocol support, provisioning models, permissions, dependencies, and governance gaps.
• Provide IAM consultation and reporting for Entra, Active Directory, AD-LDS, security groups, and approved service-request channels.
• Troubleshoot identity synchronization, account lockouts, authentication failures, Conditional Access issues, and object recovery across identity systems.
• Resolve end-user authentication incidents involving YubiKey, HYPR, and LastPass while maintaining security and compliance practices.

Requirements

• Associate degree in Information Technology, Computer Science, or a related field, or equivalent education, training, and experience.
• One to three years of experience in IT operations, service desk, systems administration, or directly related technical support.
• Working knowledge of Active Directory users, groups, computers, organizational units, and authentication fundamentals.
• Foundational understanding of authentication and authorization, including single sign-on, multifactor authentication, and least privilege.
• Familiarity with the Microsoft Entra admin center and administration of users, groups, and applications.
• Demonstrated troubleshooting, problem isolation, documentation, communication, end-user support, and application-team collaboration skills.
• Ability to follow procedures, change-management processes, and approval workflows accurately.
• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• Hands-on experience with Microsoft Entra service principals, app registrations, Enterprise Applications, API permissions, and consent models; ADFS relying-party trusts, claim rules, and SAML certificate management.
• Practical knowledge of SAML 2.0, OIDC/OAuth 2.0, Kerberos, and Integrated Windows Authentication, plus SCIM-based or Just-In-Time provisioning.
• Experience supporting passwordless and phishing-resistant authentication technologies such as YubiKey FIDO2/PIV and HYPR.
• Familiarity with AD-LDS and directory synchronization technologies such as Entra Connect.
• PowerShell scripting ability, including the Microsoft Graph PowerShell SDK for reporting and bulk object management.
• Experience with an ITSM platform such as ServiceNow for request, incident, and change management.
• Exposure to identity governance concepts including access certifications, entitlement management, and Conditional Access policy design.
• Relevant certifications such as Microsoft SC-300, SC-900, AZ-104, or CompTIA Security+.

Culture & Benefits

• Remote contractor work model.
• Eligible employees may receive medical, dental, vision, spending-account, life-insurance, and voluntary-plan benefits.
• Eligible employees may participate in a 401(k) plan.
• Work supports clients across North America through outsourced services and workforce solutions.