Identity & Access Support Analyst (L1) – Active Directory, LDAP & ADFS

Gruve; San Francisco (CA); Sur place; USD 65 000 - 90 000; Plein temps

Résumé du poste

Gruve is seeking a proactive L1 Identity & Access Analyst to support enterprise identity services, including AD, LDAP, and ADFS. You will monitor service health, perform initial troubleshooting, manage password resets, and escalate complex issues to L2/L3 teams across global 24x7 operations.

Ideal candidates have basic knowledge of AD, LDAP, SSO, and PowerShell, with ITIL/ITSM experience and strong communication skills. This role requires rotating shifts in a dynamic startup environment.

Qualifications

• Candidate should have basic knowledge of AD, LDAP, and authentication concepts.
• Familiarity with SSO, ADFS and common authentication issues is preferred.
• Experience with incident management processes and following runbooks is expected.

Responsabilités

• Monitor AD service alerts and perform routine health checks.
• Handle password resets, account unlocks, and basic user/group requests.
• Troubleshoot login failures, account lockouts, and access issues.
• Escalate LDAP/ADFS issues to L2 when needed.
• Log incidents in ITSM tools and support 24x7 operations.

Connaissances

AD basics

Authentication basics

LDAP basics

SSO familiarity

Troubleshooting

ITSM tooling

SLA awareness

Shift handover

Communication

24x7 support

PowerShell basics

Azure AD / Entra

Federation concepts

Security auditing

ITIL knowledge

Formation

ITIL Foundation

Outils

ServiceNow

Description du poste

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

We are looking for a proactive L1 Identity & Access Analyst to support enterprise identity services, including Active Directory (AD), LDAP and ADFS. The role is responsible for monitoring, alert triage, basic identity administration, initial authentication troubleshooting, incident logging and timely escalation to L2/L3 teams. The analyst will follow approved procedures to maintain identity service availability, secure access and SLA compliance across global 24x7 operations.

Key Responsibilities:

Active Directory (AD) Operations

• Monitor AD service alerts and perform routine domain service health checks.
• Handle approved password resets, account unlocks and basic user/group requests.
• Perform initial troubleshooting for login failures, account lockouts and access issues.
• Check basic domain controller availability, DNS resolution and domain connectivity.
• Log and escalation of AD replication, Group Policy and authentication issues to L2.

LDAP Operations

• Monitor LDAP-related alerts and directory service availability.
• Perform basic connectivity checks and initial troubleshooting for LDAP authentication failures.
• Validate reported application access issues and collect relevant error details.
• Escalate LDAP bind failures, directory queries and integration issues to L2.

ADFS & Federation Operations

• Monitor ADFS service health, authentication alerts and SSO-related incidents.
• Perform initial checks for login failures and application authentication issues.
• Collect error messages, timestamps and relevant diagnostic information.
• Escalate federation, certificate, token issuance and SSO issues to L2.

Operations & Service Management

• Log, categorize, prioritize and track incidents and service requests in ServiceNow or equivalent ITSM tools.
• Perform initial incident triage using approved runbooks and troubleshooting procedures.
• Escalate critical incidents and unresolved issues within defined SLAs.
• Support major incident communication and coordinate with L2/L3 and application teams.
• Maintain incident records, operational checklists and shift handover documentation.
• Follow ITIL Incident, Change and Request Management processes and established security procedures.
• Ensure effective APAC-EMEA-NLAM shift handovers and uninterrupted 24x7 support.

Preferred Skills & Qualifications:

• Basic knowledge of Active Directory, users, groups, password policies and account lockouts.
• Understanding of authentication, authorization, DNS and domain connectivity fundamentals.
• Basic knowledge of LDAP and directory-based authentication.
• Familiarity with ADFS, SSO and common authentication issues.
• Ability to perform basic troubleshooting and follow documented runbooks.
• Exposure to ServiceNow or equivalent ITSM tools and incident management processes.
• Understanding of SLA requirements, escalation procedures and access security.
• Good communication, documentation and shift handover skills.
• Willingness to work in rotational shifts in a 24x7 production support environment.
• Basic PowerShell knowledge.
• Familiarity with Microsoft Entra ID (Azure AD), MFA and hybrid identity concepts.
• Basic understanding of SAML, Kerberos, SSL/TLS and federation.
• Exposure to identity monitoring, access provisioning and security auditing.
• ITIL Foundation certification or equivalent knowledge.

Key Competencies

Active Directory Fundamentals | LDAP Basics | ADFS & SSO Awareness | Identity Monitoring | Authentication Troubleshooting | Incident Logging | Access Administration | Runbook Execution | SLA Compliance | Escalation Management | Shift Handover | Global 24x7 Operations

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you're passionate about technology and eager to make an impact, we'd love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.