Identity and Access Administrator

OmniQuest, Inc.; Mandaluyong; Hybride; PHP 600 000 - 1 000 000; Plein temps

Résumé du poste

OmniQuest, Inc. seeks an Identity and Access Administrator to manage a hybrid Microsoft environment (Entra ID and on-premises AD). You will secure user access, automate lifecycles, and protect cloud and legacy systems.

The role covers maintaining Entra Connect, implementing JML workflows, enforcing Zero Trust with Conditional Access and MFA, and governing privileged access with Entra PIM. You will monitor Defender for Identity and manage AD domains and DNS while collaborating with IT teams.

Qualifications

• 5+ years of IAM experience in a hybrid Microsoft environment.
• Strong knowledge of AD DS, Entra ID, SSO, MFA, OAuth.
• Experience with automated provisioning and Joiner-Mover-Leaver workflows.
• Scripting with PowerShell; Microsoft Graph API.
• Hands-on with Defender for Identity, Conditional Access, and PIM.
• Nice-to-have Microsoft SC-300 certification.

Responsabilités

• Manage Hybrid Infrastructure: Maintain Entra Connect, synchronization, password hashing, pass-through auth, and SSO integrations across UNILAB domains.
• Automate User Lifecycles (JML): Build Joiner-Mover-Leaver workflows connecting HR system (Darwinbox) to AD and Entra ID using automation tools, Graph API, or PowerShell.
• Enforce Security & Zero Trust: Set up Conditional Access policies, risk-based MFA, Continuous Access Evaluation, and Self-Service Password Reset.
• Govern Privileged Access: Use Entra PIM for just-in-time access, run access reviews, and apply Tiered Administration for on-prem AD.
• Detect Threats: Monitor Defender for Identity and Entra ID Protection for security threats and unusual logins.
• Administer Active Directory & Domains: Handle Domain Controllers, GPOs, DNS records, and Microsoft support tickets.

Connaissances

Entra ID

AD DS

PowerShell

Graph API

JML workflows

Defender

PIM

MFA

Description du poste

About the Role

We are looking for an Identity and Access Administrator to manage our hybrid Microsoft environment (Entra ID and on-premises Active Directory). You will secure user access, automate user lifecycles, and protect our cloud and legacy systems.

Job Responsibilities:

• Manage Hybrid Infrastructure: Maintain Entra Connect, synchronization, password hashing, pass-through auth, and SSO integrations across UNILAB domains.

• Automate User Lifecycles (JML): Build Joiner-Mover-Leaver workflows connecting our HR system (Darwinbox) to AD and Entra ID using automation tools, Graph API, or PowerShell.

• Enforce Security & Zero Trust: Set up Conditional Access policies, risk-based MFA, Continuous Access Evaluation, and Self-Service Password Reset.

• Govern Privileged Access: Use Entra PIM for just-in-time access, run access reviews, and apply Tiered Administration for on-prem AD.

• Detect Threats: Monitor Microsoft Defender for Identity and Entra ID Protection for security threats and unusual logins.

• Administer Active Directory & Domains: Handle Domain Controllers, GPOs, DNS records, and Microsoft support tickets.

Job Qualifications:

• Experience: 5+ years working with IAM in a hybrid Microsoft setting.

• Technical Strengths:

  • Strong knowledge of AD DS (DNS, GPOs, Kerberos) and Entra ID (SSO, MFA, OAuth).

  • Experience with automated provisioning and JML workflows.

  • Solid PowerShell and Microsoft Graph API skills.

  • Hands-on experience with Defender for Identity, Conditional Access, and PIM.

• Nice to Have: Microsoft SC-300 Certification.