IT Cloud & Identity Administrator II (Remote)

cafairplan; Los Angeles (CA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

cafairplan is seeking a Cloud and Identity Administrator II to manage and secure our cloud and identity environments, including Microsoft 365, Entra ID, Azure, and AWS. The role covers identity lifecycle, privileged access, and automation across hybrid infrastructure, with after-hours on-call rotation.

You will work with end-user services, security operations, and governance teams to improve controls, maintain standards, and support incident response.

Qualifications

• Bachelor’s degree preferred; equivalent advanced technical experience may be considered.
• 5+ years in systems/cloud/identity administration or related roles.
• Strong knowledge of M365, Entra ID, Azure, AWS, and related services.

Responsibilities

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, AD, Intune, Exchange Online, SharePoint, OneDrive, Teams and related services.
• Manage identity and access controls across user and application lifecycles.
• Administer privileged access and PAM processes with governance and reviews.
• Perform advanced systems and cloud administration for hybrid infrastructure including patching and configuration management.
• Support security operations by reviewing alerts, logs, and vulnerability findings.
• Lead cloud, identity, infrastructure, security, and automation initiatives.
• Develop standards, runbooks, and documentation to support audit-ready operations.
• Partner with stakeholders and vendors to resolve complex issues and improve controls.

Skills

Microsoft 365

Entra ID

Active Directory

Azure

AWS

Intune

PowerShell

Terraform

SAML/OIDC

Education

Bachelor’s degree in IT, CS, Cybersecurity, or related field

Tools

Exchange Online

SharePoint

OneDrive

Teams

Job description

POSITION SUMMARY

The Cloud and Identity Administrator II administers, secures, and improves the Association’s cloud, identity, and related infrastructure environments. This hybrid role combines cloud administration, systems administration, security operations, identity management, and identity governance across Microsoft 365, Entra ID, Azure/AWS cloud platforms, endpoint management, directory services, authentication, privileged access, and related security controls. This role also participates in an after-hours on-call rotation and may be required to respond to urgent operational and security events outside normal business hours.

PRINCIPAL DUTIES & RESPONSIBILITIES

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, Active Directory, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and related cloud, identity, and enterprise services.
• Manage identity and access controls across the user and application lifecycle,
• Administer privileged access and PAM-related processes, including privileged account management, approval workflows, service account governance, privileged session monitoring, and periodic validation.
• Perform advanced systems and cloud administration for hybrid infrastructure, including servers, directory services, cloud workloads, patching, vulnerability remediation, configuration management, and operational controls.
• Support security operations by reviewing alerts, logs, access activity, cloud events, and vulnerability findings.
• Recommend and implement remediation or compensating controls as appropriate.
• Lead assigned cloud, identity, infrastructure, security, and automation initiatives
• Develop and maintain standards, procedures, technical documentation, runbooks, configuration records, access review evidence, and operational artifacts to support reliable, audit-defensible IT and security operations.
• Partner with business stakeholders and vendors to resolve complex issues, improve reliability and controls, and participate in after-hours on-call responses

EDUCATION & EXPERIENCE

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field preferred; equivalent advanced technical experience may be considered.
• Minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role.
• Advanced knowledge of Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and related cloud and enterprise services.
• Strong understanding of identity, access, and privileged access management practices, including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews.
• Experience supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls in hybrid environments.
• Working knowledge of scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, application provisioning, SAML/OIDC, SCIM, API-based account lifecycle management, and infrastructure as code concepts such as Terraform preferred.
• Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks and relevant certifications preferred.