IT System Administration – Senior/Specialist
State of Washington
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Benefits offered by this job
Job summary
Washington State Department of Ecology is seeking an IT System Administration – Senior/Specialist to lead IAM modernization, focusing on Windows Domain Controllers, Azure Entra ID and cloud-native strategies. The role requires mentoring Domain Administrators and collaborating across teams to strengthen security posture.
You will assess architecture, plan adoption of Intune, and design Azure-based solutions, balancing on-prem and cloud needs. Telework eligible with in-person meetings as needed.
Qualifications
- Seven years of experience and/or education related to the duties of the position, including IAM, AD, DNS, and GPO
- Ability to apply security policies, governance requirements, and best practices to identity, directory, and DNS environments
- Experience managing identity lifecycles, authentication, permissions, and roles for secure access control
- Experience configuring, maintaining, modernizing, and troubleshooting Active Directory and Azure Entra ID
- Ability to design, implement, and troubleshoot GPOs and translate GPOs to Intune/Azure Policies
- Experience designing, implementing, and securing on-premise and cloud DNS
- Ability to monitor, update, and implement disaster recovery for IAM/AD/DNS operations
Responsibilities
- Mentor and guide other Domain Administrators.
- Provide customer service and collaborate to improve IAM security posture.
- Communicate strategy for modernizing IAM to management.
- Assess Windows Domain Controller architecture and health for optimization.
- Assess Group Policy architecture and health for simplification.
- Improve IAM security posture and infrastructure.
- Plan adoption of Intune-based policy management.
- Design and plan use of Azure for cloud-native IAM.
Skills
Education
Tools
Job description
The Department of Ecology is hiring an IT System Administration – Senior/Specialist within the Information Technology Security Services Office.
- Headquarters Office in Lacey, WA.
- Upon hire, you must live within a commutable distance from the duty station.
- This position is eligible for telework and flexible schedule options.
- You may telework most of your work time with occasional in-person meetings and activities.
- Schedules are dependent upon position needs and are subject to change.
- Apply by September 09, 2026
- Applications submitted after the date above may not be reviewed unless additional qualified applicants are needed.
In this role, you will be the senior Identity and Access Management Administrator, with responsibilities for Windows Domain Controllers and cloud-based identity management platform, including Azure. You will be responsible for architecting and modernizing Ecology's Identity and Access Management strategy through the adoption of cloud-native technologies.
- Mentor and guide other Domain Administrators.
- Provide excellent customer service and collaborate with other teams to improve the security posture of Ecology's Identity and Access Management strategy.
- Communicate effectively with Management to articulate Ecology's strategy for modernizing Identity and Access Management.
- Assess the current Windows Domain Controller architecture and health and identify optimization opportunities.
- Assess the current Group Policy Objects architecture and health and identify opportunities to streamline.
- Assess and identify opportunities to improve the security posture of Ecology's Identity and Access Management strategy and infrastructure.
- Assess and plan the adoption of Intune based policy management.
- Design and plan the use of Azure technologies for cloud native Identity and Access Management.
For detailed information on how we calculate experience and responses to other frequently asked questions, please visit our Recruitment website.
- Seven years of experience and/or education related to the duties of the position, which must include the following:
- Critical Thinking & Decision-Making – Proven track record evaluating risks, analyzing complex IAM, AD, DNS, and GPO issues, and making informed decisions to maintain secure and stable operations.
- Security & Compliance – Demonstrated ability to apply and uphold security policies, governance requirements, and best practices to maintain compliant and secure identity, directory, and DNS environments.
- Identity & Access Management Administration – Demonstrated ability to manage identity lifecycles, authentication, permissions, and roles to ensure secure and efficient access control.
- Active Directory & Entra ID Management – Proven track record configuring, maintaining, modernizing, and troubleshooting Active Directory and Azure Entra ID to ensure reliable identity and directory services.
- Group Policy Architecture & Management – Demonstrated ability to design, implement, and troubleshoot GPOs to enforce secure configurations and agency-wide standards. Ability to translate GPO’s to Intune and Azure Policies.
- DNS Administration & Architecture – Proven track record designing, implementing, securing, and troubleshooting on-premise and cloud DNS services to ensure accurate and reliable name resolution.
- System Maintenance & Continuity Planning – Demonstrated ability to apply updates, monitor performance, and implement disaster recovery strategies to maintain secure and resilient IAM, AD, and DNS operations.
- Education involving a major study in Computer Science, Information Technology (IT), Science, Technology, Engineering, Mathematics (STEM), or closely related field.
This position does not require formal education. Instead, applicants may meet the qualification requirement through experience alone or through any combination of experience and education totaling seven years. Education in a related field may be applied year-for-year toward the seven-year requirement, as long as the applicant has at least three years of directly related experience and meets all the required competencies listed above. The examples listed below illustrate acceptable combinations of experience and education that satisfy this requirement.
- 7 years of experience.
- 6 years of experience AND 30-59 semester or 45-89 quarter college credits.
- 5 years of experience AND 60-89 semester or 90-134 quarter college credits (Associate’s degree).
- 4 years of experience AND 90-119 semester or 135-179 quarter college credits.
- 3 years of experience AND a Bachelor’s degree or higher.
- Must be able to provide transportation to and from office or offsite trainings or assignments.
- This position requires training to keep consistent with industry best practices. Leadership works with industry leaders to forecast changes in information technology and lists required training in this position’s yearly Performance Development Plan (PDP). Staff within this division are provided two (2) hours per week for training. It is expected that this position will take what is learned in their training and apply it to their daily work.
- Cloud Infrastructure Familiarity – Ability to understand and work with broader Azure services (beyond Entra ID and DNS) to support identity integrations across cloud environments.
- Scripting & Automation – Ability to use tools like PowerShell to automate identity, AD, DNS, and GPO tasks to improve efficiency and consistency.
- Identity Governance & Administration (IGA) Tools – Ability to work with identity governance platforms and workflows to support lifecycle automation, attestation, and compliance.
- Hybrid Identity Architecture – Ability to design and support hybrid identity environments that integrate on-premise AD with cloud identity platforms.
- Network Infrastructure Awareness – Ability to understand related network components (firewalls, VLANs, routing) that affect IAM and DNS performance and security.
If you are excited about this role and meet the required qualifications, we encourage you to apply. Desired qualifications reflect additional knowledge, skills, or experience that are nice to have but not required. Studies have shown that some applicants, especially women and people of color, are less likely to apply unless they meet every listed qualification. At the Department of Ecology, we are dedicated to building a diverse and authentic workplace centered in belonging, and we welcome applicants with varied backgrounds and unique perspectives.
Ecology does not use the E-Verify system; therefore, we are not eligible to extend STEM Optional Practical Training (OPT). For more information, please visit www.uscis.gov.
Diversity: We celebrate and appreciate diversity; our unique perspectives and abilities enrich us all and lead to innovative approaches and solutions.
Equity: We champion equity, recognizing that each of us need different things to thrive.
Inclusion: We intentionally create and hold space so that we all have meaningful opportunities to participate and contribute to Ecology’s work.
Respect: We treat each other with respect and dignity, acknowledging the inherent worth of our diverse perspectives and lived experiences, even in times of uncertainty and disagreement.
We believe that DEIR is both a goal and an action. We are on a journey, honoring our shared humanity and taking steps to demonstrate our commitment to a vision where each of us is heard, seen, and valued.
Ecology seeks diverse applicants: We view diversity, equity, inclusion, and respect through a broad lens including race, ethnicity, class, age, religion, sexual orientation, gender identity, immigration status, military background, language, education, life experience, physical disability, neurodiversity, and intersectional identities. Qualified job seekers from all backgrounds are encouraged to apply.
Application Attestation: By submitting an application, you are affirming that the information contained in your application and on all attachments is complete and truthful. The state may verify this information, and any false or misleading answers may result in rejection of your application or dismissal if employed.
If you need reasonable accommodation during the application and/or screening process, including this job announcement in an alternate format:
- Please contact us at 360-407-6186 or careers@ecy.wa.gov
- If you are deaf or hard of hearing, you may call through the Washington Relay Service by dialing 711 or 1-800-833-6384.
- For specific questions about the position location options, schedule, or duties, please contact Senthil Masilamani at Senthil.Masilamani@ecy.wa.gov
- If you need assistance applying for this job, are inquiring about the status of your application, would like to request the full position description, or have any other questions, please contact the Recruitment Team at careers@ecy.wa.gov
The Information Technology Services Office’s (ITSO) mission is to create and support useful technology services that adapt for the future and support Ecology’s mission.
The Security Team's mission is to guide Ecology in securing evolving technologies to meet business needs in an increasingly dynamic threat landscape. We accomplish this by utilizing a risk-based and proactive approach in a collaborative environment.
- Expertise/Excellence: Encompasses the team's commitment to high standards in cybersecurity knowledge and practice.
- Innovative and Forward-Thinking: Combining innovation with a forward-thinking approach to stay at the forefront of security concepts.
- Risk-Based and Proactive Strategy: Reflects a focus on identifying and managing risks proactively.
- Adaptability and Continuous Learning: Emphasizing the importance of evolving and learning in a rapidly changing cybersecurity landscape.
- Transparency and Customer Focus: Underscores the importance of being transparent in operations and centered on customer needs.
- Collaboration: Emphasizes the importance of working together within the team and with customers to achieve more comprehensive and effective cybersecurity outcomes.
As the State of Washington’s environmental protection agency, we are deeply committed to protecting, preserving, and enhancing Washington’s environment for current and future generations. Joining Ecology means becoming part of a team dedicated to protecting and sustaining healthy land, air, water, and climate in harmony with a strong economy. A career in public service at Ecology allows you to help solve some of the most challenging problems facing our state, while keeping your health and financial security a priority. We combine one of the most competitive benefits packages in the nation with a strong commitment to life/work balance. We invest in our employees to create and sustain a working environment that encourages creative leadership, effective resource management, teamwork, professionalism, and accountability.
- Medical/Dental/Vision for employee & dependent(s)
- Public Employees Retirement System (PERS)
- Vacation, Sick, and other Leave*
- 11 Paid Holidays per year*
- Public Service Loan Forgiveness
- Tuition Waiver
- Long Term Disability & Life Insurance
- Deferred Compensation Programs
- Dependent Care Assistance Program (DCAP)
- Flexible Spending Arrangement (FSA)
- Employee Assistance Program
- Commute Trip Reduction Incentive
- Combined Fund Drive
- SmartHealth *Click here for more information
To learn more about Ecology, please visit our website, explore Working at Ecology, check out our Strategic Plan, and connect with us on LinkedIn, Facebook, Instagram, YouTube, or our blog.
The Washington State Department of Ecology is an equal opportunity employer. We strive to create a working environment that includes and respects cultural, racial, ethnic, sexual orientation and gender identity diversity. Women, racial and ethnic minorities, persons of disability, persons over 40 years of age, veterans, military spouses or people with military status, and people of all sexual orientations and gender identities are encouraged to apply.
This is a position covered by a bargaining unit for which the Washington Federation of State Employees (WFSE) is the exclusive representative.
This recruitment may be used to fill other positions of the same job classification across the agency. Once all the position(s) from the recruitment announcement are filled, the recruitment may only be used to fill additional open positions for the next sixty (60) days.
#LI-DNP
#LI-Hybrid
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
