IT Cloud & Identity Administrator II (Remote)

California FAIR Plan Association; Deutschland; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

California FAIR Plan Association is seeking a Cloud and Identity Administrator II to manage and secure our cloud and identity environments. This hybrid role covers Microsoft 365, Entra ID, Azure, AWS, and related services across on-premises and cloud platforms.

Responsibilities include governance, access control, and automation initiatives with on-call support outside business hours. A strong background in cloud/security administration is required.

Qualifikationen

• Minimum 5 years of progressive experience in systems, cloud, or security administration.
• Advanced knowledge of Microsoft 365, Entra ID, Azure, AWS, and related services.
• Strong identity, access, and privileged access management practices including SSO, MFA, and RBAC.
• Experience with hybrid environments, patching, vulnerability remediation, and configuration management.
• Familiarity with scripting and automation concepts; Terraform preferred.

Aufgaben

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, AD, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and related services.
• Manage identity and access controls across the user and application lifecycle.
• Administer privileged access and PAM-related processes, including governance and reviews.
• Perform advanced systems and cloud administration for hybrid infrastructure, including patches and controls.
• Support security operations by reviewing alerts, logs, and vulnerability findings.
• Lead cloud, identity, infrastructure, security, and automation initiatives.
• Develop standards, runbooks, and documentation to support audit-defensible operations.
• Partner with stakeholders and vendors to resolve complex issues and improve controls.

Kenntnisse

Cloud administration

Identity administration

Security administration

Hybrid infrastructure management

On-call rotation

Ausbildung

Bachelor’s degree in IT/CS/Cybersecurity or equivalent

Tools

Microsoft 365

Entra ID

Azure

AWS

Intune

Autopilot

Exchange Online

SharePoint

OneDrive

Teams

PAM (Privileged Access Management)

Terraform

PowerShell

Jobbeschreibung

POSITION SUMMARY

The Cloud and Identity Administrator II administers, secures, and improves the Association’s cloud, identity, and related infrastructure environments. This hybrid role combines cloud administration, systems administration, security operations, identity management, and identity governance across Microsoft 365, Entra ID, Azure/AWS cloud platforms, endpoint management, directory services, authentication, privileged access, and related security controls. This role also participates in an after-hours on-call rotation and may be required to respond to urgent operational and security events outside normal business hours.

PRINCIPAL DUTIES & RESPONSIBILITIES

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, Active Directory, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and related cloud, identity, and enterprise services.
• Manage identity and access controls across the user and application lifecycle,
• Administer privileged access and PAM-related processes, including privileged account management, approval workflows, service account governance, privileged session monitoring, and periodic validation.
• Perform advanced systems and cloud administration for hybrid infrastructure, including servers, directory services, cloud workloads, patching, vulnerability remediation, configuration management, and operational controls.
• Support security operations by reviewing alerts, logs, access activity, cloud events, and vulnerability findings.
• Recommend and implement remediation or compensating controls as appropriate.
• Lead assigned cloud, identity, infrastructure, security, and automation initiatives
• Develop and maintain standards, procedures, technical documentation, runbooks, configuration records, access review evidence, and operational artifacts to support reliable, audit-defensible IT and security operations.
• Partner with business stakeholders and vendors to resolve complex issues, improve reliability and controls, and participate in after-hours on-call responses

EDUCATION & EXPERIENCE

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field preferred; equivalent advanced technical experience may be considered.
• Minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role.
• Advanced knowledge of Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and related cloud and enterprise services.
• Strong understanding of identity, access, and privileged access management practices, including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews.
• Experience supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls in hybrid environments.
• Working knowledge of scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, application provisioning, SAML/OIDC, SCIM, API-based account lifecycle management, and infrastructure as code concepts such as Terraform preferred.
• Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks and relevant certifications preferred.