Identity and Access Management Technical Analyst

Socket.dev; Framingham (MA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible PTO (22 days)

Company 401(k) match

Health and wellness programs

Discounts

Job summary

Staples is seeking a Technical Analyst, Identity and Access Management to design, implement, and secure enterprise directory services. You’ll administer Microsoft Entra ID, Active Directory, and hybrid identity while driving modernization and Zero Trust initiatives.

You will build automation with PowerShell and Graph API, manage governance for access reviews and RBAC, and mentor junior staff in a collaborative, customer-centric environment.

Qualifications

• Bachelor’s degree in CS, IT, cybersecurity, engineering, or related field or equivalent experience.
• 5+ years supporting enterprise identity, infrastructure, cloud, or directory services.
• 2+ years administering AD DS, Entra ID, and hybrid identity.
• Experience with Conditional Access, MFA, Zero Trust controls, identity governance, RBAC.
• 3+ years PowerShell scripting, automation, Graph API integrations.
• Experience with OAuth, OpenID Connect, SAML, LDAP/LDAPS, Kerberos, TCP/IP.

Responsibilities

• Design, implement, administer, and support Entra ID and Active Directory environments.
• Manage users, groups, OUs, service accounts, GPOs, replication, trusts, identity lifecycle.
• Develop and maintain Conditional Access policies, MFA, passwordless authentication, Zero Trust.
• Administer identity governance, access reviews, entitlement management, RBAC, PAM.
• Lead troubleshooting for complex directory, authentication, and access issues.
• Build automation using PowerShell and Graph API to improve efficiency.
• Integrate identity services with cloud, SaaS, and on-prem apps using modern protocols.
• Monitor service health, performance, security posture, and drive remediation.
• Contribute to upgrades, migrations, governance enhancements, hybrid identity initiatives.
• Create technical standards, docs, procedures and best practices.
• Evaluate new identity security tech and recommend solutions.

Skills

Identity and access management

PowerShell scripting

Microsoft Graph API

Active Directory

Zero Trust concepts

Hybrid identity

Cloud technologies

Problem solving

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field

Master’s degree in Information Technology, Cybersecurity, Computer Science, or related discipline

Tools

Microsoft Entra ID

Active Directory

Microsoft Entra Connect

Group Policy

PowerShell

Microsoft Graph API

Job description

Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer-centric, results-oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer-centric technology services.

The Technical Analyst, Identity and access management is a senior technical contributor responsible for the design, implementation, administration, security, automation, and continuous improvement of enterprise directory and identity management platforms. You will support Microsoft Entra ID, Active Directory, authentication and authorization services, identity governance, and privileged access solutions. In this highly collaborative role, you will help keep directory services secure, resilient, and highly available while advancing modernization, Zero Trust, and operational excellence across the identity ecosystem.

What you’ll be doing:

• Design, implement, administer, and support enterprise Microsoft Entra ID and Active Directory environments for reliability, security, and scalability.
• Manage users, groups, organizational units, service accounts, Group Policy, replication, trusts, and identity lifecycle processes.
• Develop and maintain Conditional Access policies, multi-factor authentication controls, passwordless authentication solutions, and identity protection capabilities aligned with Zero Trust principles.
• Administer identity governance capabilities, including access reviews, entitlement management, lifecycle workflows, role-based access controls, and privileged access management.
• Lead troubleshooting and root cause analysis for complex directory, authentication, authorization, and access management issues.
• Build and maintain automation using PowerShell, Microsoft Graph API, and related technologies to improve efficiency, consistency, and service quality.
• Integrate identity services with cloud, SaaS, and enterprise applications using modern authentication protocols and security standards.
• Monitor service health, performance, capacity, operational metrics, and security posture, driving remediation and continuous improvement.
• Contribute to Active Directory upgrades, tenant transformations, migrations, governance enhancements, and hybrid identity initiatives.
• Create technical standards, engineering documentation, operational procedures, and best practices.
• Evaluate emerging identity and security technologies and recommend solutions that strengthen security, operations, and user experience.
• Mentor junior team members, serve as an escalation point, and lead small technical projects or workstreams.

What you bring to the table:

• Strong analytical and problem-solving skills with the ability to diagnose complex technical issues and implement lasting solutions.
• Initiative and accountability for delivering secure, reliable, high-quality technology solutions.
• Ability to prioritize multiple assignments and competing needs in a dynamic environment.
• Strong collaboration and relationship-building skills across technical and business teams.
• Excellent written and verbal communication skills, including the ability to translate technical concepts for varied audiences.
• A continuous learning mindset and interest in identity management, cybersecurity, automation, and cloud technologies.

What’s needed- Basic Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent experience.
• 5+ years of experience supporting enterprise identity, infrastructure, cloud, or directory services environments.
• 2+ years of experience administering Microsoft Active Directory Domain Services, Microsoft Entra ID, and hybrid identity solutions.
• Experience managing Active Directory operations, including object lifecycle administration, replication, Group Policy, trusts, and directory services.
• Experience with Conditional Access, MFA, Zero Trust identity controls, identity governance, role-based access controls, access reviews, entitlement management, and lifecycle workflows.
• 3+ years of experience with PowerShell scripting, automation, Microsoft Graph API integrations, and systems integration.
• Experience supporting modern authentication and identity protocols, including OAuth, OpenID Connect, SAML, DNS, LDAP/LDAPS, Kerberos, and TCP/IP.

What’s needed- Preferred Qualifications:

• Master’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• Experience with Microsoft Entra Connect, Entra Cloud Sync, or hybrid identity synchronization technologies.
• Experience supporting tenant migrations, mergers, acquisitions, or large-scale identity transformation initiatives.
• Experience with Privileged Identity Management, privileged access management, or enterprise PAM platforms such as CyberArk or Delinea.
• Experience supporting identity backup, recovery, disaster recovery, or business continuity solutions.
• Experience with Infrastructure as Code, DevOps practices, Git, Azure DevOps, or related automation frameworks.
• Industry certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Administrator Associate, CISSP, Security+, or equivalent.
• Experience using AI-assisted tools for scripting, automation, troubleshooting, or operational efficiency.

We Offer:

• Inclusive culture with associate-led Business Resource Groups
• Flexible PTO (22 days) and Holiday Schedule
• Online and Retail Discounts, Company Match 401(k), Physical and Mental Health Wellness programs, and more!

The salary range represents the expected compensation for this role at the time of posting. The specific base pay may be influenced by a variety of factors to include the candidate's experience, skill set, education, geography, business considerations, and internal equity. In addition to base pay, this role may be eligible for bonuses, or other forms of variable compensation.

Staples is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, age, national origin, protected veteran status, disability, or any other basis protected by federal, state, or local law.