Hybrid Cloud & Identity Administrator II (IAM & Security)

cafairplan; Los Angeles (CA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

cafairplan is seeking a Cloud and Identity Administrator II to manage and secure our cloud and identity environments, including Microsoft 365, Entra ID, Azure, and AWS. The role covers identity lifecycle, privileged access, and automation across hybrid infrastructure, with after-hours on-call rotation.

You will work with end-user services, security operations, and governance teams to improve controls, maintain standards, and support incident response.

Qualifications

• Bachelor’s degree preferred; equivalent advanced technical experience may be considered.
• 5+ years in systems/cloud/identity administration or related roles.
• Strong knowledge of M365, Entra ID, Azure, AWS, and related services.

Responsibilities

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, AD, Intune, Exchange Online, SharePoint, OneDrive, Teams and related services.
• Manage identity and access controls across user and application lifecycles.
• Administer privileged access and PAM processes with governance and reviews.
• Perform advanced systems and cloud administration for hybrid infrastructure including patching and configuration management.
• Support security operations by reviewing alerts, logs, and vulnerability findings.
• Lead cloud, identity, infrastructure, security, and automation initiatives.
• Develop standards, runbooks, and documentation to support audit-ready operations.
• Partner with stakeholders and vendors to resolve complex issues and improve controls.

Skills

Microsoft 365

Entra ID

Active Directory

Azure

AWS

Intune

PowerShell

Terraform

SAML/OIDC

Education

Bachelor’s degree in IT, CS, Cybersecurity, or related field

Tools

Exchange Online

SharePoint

OneDrive

Teams

Job description

cafairplan is seeking a Cloud and Identity Administrator II to manage and secure our cloud and identity environments, including Microsoft 365, Entra ID, Azure, and AWS. The role covers identity lifecycle, privileged access, and automation across hybrid infrastructure, with after-hours on-call rotation.

You will work with end-user services, security operations, and governance teams to improve controls, maintain standards, and support incident response.