Identity & Access Management (IAM) and Windows Support Engineer

HCLTech; United States; On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D insurance

Disability insurance

Employee assistance program

401(k) retirement plan

PTO 10 days per year

10 holidays per year

Job summary

HCLTech is seeking an IAM and Windows Support Engineer to manage identity and access across Active Directory, RBAC, MFA, and Microsoft 365. You will handle provisioning, access reviews, and privileged access, while supporting Windows endpoints and server environments.

The role involves SCCM/Intune software deployment, GPO administration, and ITIL-aligned incident management. Applicants should be proficient with VPN networking and remote access, while coordinating with global teams.

Qualifications

• Hands-on experience with Active Directory, IAM, MFA, Windows 10/11, Windows Server, SCCM/Intune, Group Policy, VPN, and ITIL.
• Experience administering AD users, groups, OUs, and permissions.
• Experience with RBAC and privileged access management.
• Experience in SCCM/Intune-based software deployment and patching.
• Familiarity with Microsoft 365 apps and endpoint security.

Responsibilities

• Provision, modify, and de-provision user accounts based on approved requests.
• Manage AD users, groups, OUs, and permissions.
• Perform access reviews and entitlement validation.
• Support MFA onboarding and password resets.
• Manage RBAC and privileged access requests.
• Investigate identity/access incidents.
• Onboard/offboard employees and transfers.
• Support Windows 10/11 workstations and Windows Server environments.
• Troubleshoot OS/app/user-profile issues.
• Administer Group Policy and policy troubleshooting.
• Deploy software/patches via SCCM/Intune.
• Troubleshoot VPN/network connectivity and remote access.
• Support Microsoft 365 applications and endpoint security tools.
• Conduct root cause analysis for recurring issues.
• Maintain knowledge bases and SOPs.
• Follow ITIL Incident/Request/Change/Problem processes.

Skills

Active Directory

IAM

Access provisioning

RBAC

Windows 10/11

Windows Server

Group Policy

SCCM

Intune

Microsoft 365

VPN

Incident management

RCA

ITIL

SLA/KPI management

Tools

Intune

SCCM

Job description

We are seeking an experienced IAM and Windows Support Engineer to provide identity and access management, Windows infrastructure, endpoint, and Microsoft 365 support. The ideal candidate will have hands‑on experience with Active Directory, RBAC, MFA, Windows 10/11, Windows Server, SCCM/Intune, Group Policy, VPN, and ITIL processes.

Key Responsibilities

Identity & Access Management

• Provision, modify, and de‑provision user accounts based on approved requests.
• Manage Active Directory users, groups, Organizational Units (OUs), and security permissions.
• Perform periodic access reviews and entitlement validation.
• Support MFA onboarding, password resets, and authentication‑related troubleshooting.
• Manage Role‑Based Access Control (RBAC) and privileged access requests.
• Investigate and resolve identity and access‑related incidents.
• Support employee onboarding, offboarding, and internal transfers.
• Support Windows 10/11 workstations and Windows Server environments.
• Troubleshoot operating system, application, and user profile issues.
• Support Group Policy (GPO) administration and policy troubleshooting.
• Manage software deployment, updates, and patching through SCCM and Intune.
• Troubleshoot VPN, network connectivity, and remote‑access issues.
• Support Microsoft 365 applications and endpoint security tools.
• Perform Root Cause Analysis (RCA) for recurring incidents and technical issues.
• Maintain knowledge base articles, standard operating procedures, and technical documentation.
• Follow ITIL processes for Incident, Request, Change, and Problem Management.
• Ensure SLA and KPI targets are consistently met.
• Participate in audits and compliance‑related activities.
• Coordinate with global teams across APAC, EMEA, and the Americas.
• Participate in on‑call and major incident support when required.

Required Skills

• Active Directory (AD)
• Identity & Access Management (IAM)
• User Access Provisioning & De‑provisioning
• RBAC and Privileged Access Management
• Windows 10/11 and Windows Server
• Group Policy (GPO)
• Microsoft SCCM
• Microsoft 365
• VPN and Network Troubleshooting
• Incident & Problem Management
• Root Cause Analysis (RCA)
• ITIL Processes
• SLA/KPI Management

A candidate’s pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance‑based bonuses subject to HCL policies. In addition, this role is eligible for the following benefits subject to HCL policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off (PTO) per year (some positions are eligible for unlimited PTO); and 10 paid holidays per year.

Disclaimer

HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to [e-mail] for investigation.