Hybrid Identity & Access Administrator (Entra ID, AD, JML)

OmniQuest, Inc.; Mandaluyong; Hybrid; PHP 600,000 - 1,000,000; Full time

Job summary

OmniQuest, Inc. seeks an Identity and Access Administrator to manage a hybrid Microsoft environment (Entra ID and on-premises AD). You will secure user access, automate lifecycles, and protect cloud and legacy systems.

The role covers maintaining Entra Connect, implementing JML workflows, enforcing Zero Trust with Conditional Access and MFA, and governing privileged access with Entra PIM. You will monitor Defender for Identity and manage AD domains and DNS while collaborating with IT teams.

Qualifications

• 5+ years of IAM experience in a hybrid Microsoft environment.
• Strong knowledge of AD DS, Entra ID, SSO, MFA, OAuth.
• Experience with automated provisioning and Joiner-Mover-Leaver workflows.
• Scripting with PowerShell; Microsoft Graph API.
• Hands-on with Defender for Identity, Conditional Access, and PIM.
• Nice-to-have Microsoft SC-300 certification.

Responsibilities

• Manage Hybrid Infrastructure: Maintain Entra Connect, synchronization, password hashing, pass-through auth, and SSO integrations across UNILAB domains.
• Automate User Lifecycles (JML): Build Joiner-Mover-Leaver workflows connecting HR system (Darwinbox) to AD and Entra ID using automation tools, Graph API, or PowerShell.
• Enforce Security & Zero Trust: Set up Conditional Access policies, risk-based MFA, Continuous Access Evaluation, and Self-Service Password Reset.
• Govern Privileged Access: Use Entra PIM for just-in-time access, run access reviews, and apply Tiered Administration for on-prem AD.
• Detect Threats: Monitor Defender for Identity and Entra ID Protection for security threats and unusual logins.
• Administer Active Directory & Domains: Handle Domain Controllers, GPOs, DNS records, and Microsoft support tickets.

Skills

Entra ID

AD DS

PowerShell

Graph API

JML workflows

Defender

PIM

MFA

Job description

OmniQuest, Inc. seeks an Identity and Access Administrator to manage a hybrid Microsoft environment (Entra ID and on-premises AD). You will secure user access, automate lifecycles, and protect cloud and legacy systems.

The role covers maintaining Entra Connect, implementing JML workflows, enforcing Zero Trust with Conditional Access and MFA, and governing privileged access with Entra PIM. You will monitor Defender for Identity and manage AD domains and DNS while collaborating with IT teams.