IT Cloud & Identity Administrator II (Remote)

California FAIR Plan Association; Los Angeles, Northern (CA, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

California FAIR Plan Association is seeking a Cloud and Identity Administrator II to oversee cloud and identity environments, security operations, and governance across Microsoft 365, Entra ID, Azure, and AWS. This hybrid role involves on-call rotations and collaboration with stakeholders to improve reliability and controls.

The ideal candidate has 5+ years in systems, cloud, or identity administration, with strong knowledge of hybrid identity, PAM, and IaC practices.

Qualifications

• Bachelor’s degree preferred; equivalent advanced technical experience may be considered.
• Minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role.
• Advanced knowledge of Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and related cloud and enterprise services.
• Strong understanding of identity, access, and privileged access management practices including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews.
• Experience supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls in hybrid environments.
• Working knowledge of scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, API-based account lifecycle management, and infrastructure as code concepts such as Terraform preferred.
• Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks and relevant certifications preferred.

Responsibilities

• Administer, secure, and improve cloud and identity services across Microsoft 365, Entra ID, Azure, AWS, and related platforms.
• Manage identity and access controls across user and application lifecycles.
• Administer privileged access and PAM-related processes including governance and reviews.
• Perform advanced systems and cloud administration for hybrid infrastructure and security controls.
• Support security operations by reviewing alerts, logs, and cloud events.
• Recommend remediation or compensating controls as appropriate.
• Lead assigned cloud, identity, infrastructure, security, and automation initiatives.
• Develop and maintain standards, runbooks, documentation, and audit evidence for operations.
• Collaborate with stakeholders and vendors to resolve complex issues and respond to on-call events.

Skills

Cloud administration

Identity administration

Security administration

Hybrid infrastructure

PAM

Automation

PowerShell

Education

Bachelor’s degree in IT/CS

Tools

Microsoft 365

Entra ID

Active Directory

Azure

AWS

Intune

Autopilot

Exchange Online

SharePoint

OneDrive

Teams

Job description

POSITION SUMMARY

The Cloud and Identity Administrator II administers, secures, and improves the Association’s cloud, identity, and related infrastructure environments. This hybrid role combines cloud administration, systems administration, security operations, identity management, and identity governance across Microsoft 365, Entra ID, Azure/AWS cloud platforms, endpoint management, directory services, authentication, privileged access, and related security controls. This role also participates in an after-hours on-call rotation and may be required to respond to urgent operational and security events outside normal business hours.

PRINCIPAL DUTIES & RESPONSIBILITIES

• Administer, secure, and improve Microsoft 365, Entra ID, Azure, AWS, Active Directory, Intune, Exchange Online, SharePoint, OneDrive, Teams, endpoint management, and related cloud, identity, and enterprise services.
• Manage identity and access controls across the user and application lifecycle,
• Administer privileged access and PAM-related processes, including privileged account management, approval workflows, service account governance, privileged session monitoring, and periodic validation.
• Perform advanced systems and cloud administration for hybrid infrastructure, including servers, directory services, cloud workloads, patching, vulnerability remediation, configuration management, and operational controls.
• Support security operations by reviewing alerts, logs, access activity, cloud events, and vulnerability findings.
• Recommend and implement remediation or compensating controls as appropriate.
• Lead assigned cloud, identity, infrastructure, security, and automation initiatives
• Develop and maintain standards, procedures, technical documentation, runbooks, configuration records, access review evidence, and operational artifacts to support reliable, audit-defensible IT and security operations.
• Partner with business stakeholders and vendors to resolve complex issues, improve reliability and controls, and participate in after-hours on-call responses

EDUCATION & EXPERIENCE

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field preferred; equivalent advanced technical experience may be considered.
• Minimum of 5 years of progressive experience in systems administration, cloud administration, identity administration, security administration, or a related technical role.
• Advanced knowledge of Microsoft 365, Entra ID, Active Directory, Azure, AWS, Intune, Autopilot, Exchange Online, SharePoint, OneDrive, Teams, hybrid identity, endpoint management, and related cloud and enterprise services.
• Strong understanding of identity, access, and privileged access management practices, including SSO, MFA, conditional access, RBAC, service account governance, credential vaulting, just-in-time access, and access reviews.
• Experience supporting cloud security, endpoint security, vulnerability remediation, logging, monitoring, backup, disaster recovery, configuration management, and operational controls in hybrid environments.
• Working knowledge of scripting, PowerShell, automation, reporting, workflow automation, audit evidence collection, application provisioning, SAML/OIDC, SCIM, API-based account lifecycle management, and infrastructure as code concepts such as Terraform preferred.
• Working knowledge of CIS, NIST, SOC 2, ISO 27001, or similar control frameworks and relevant certifications preferred.