Junior IT Administrator - Identity & Access Management (IAM)

BRMi; Maryland City (MD); Remote; USD 70,000 - 100,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental, and Vis

Employer-Paid Life Insurance

Employer-Paid Short-Term and Long-Term

401(k)

PTO including Vacation/Sick/Holidays

Educational Assistance

Job summary

BRMi is seeking a Junior IT Administrator to support IAM operations across the organization. You will work with Microsoft Entra, Active Directory, AD-LDS, and ADFS to ensure secure authentication and identity governance.

You will handle routine IAM requests, troubleshoot auth issues, review app integrations, and assist with identity governance. A foundational IT background and strong problem-solving skills are essential.

Qualifications

• Associate degree or equivalent; IT operations or technical support experience welcome.
• 1–3 years in IT operations, technical support, service desk, or related role.
• Working knowledge of Active Directory; authentication fundamentals.
• Foundational IAM concepts: authentication, authorization, SSO, MFA, least-privilege.
• Familiarity with Microsoft Entra administration center and basic user/group/app management.
• Ability to troubleshoot and document findings.
• Strong communication and organizational skills.
• Willingness to follow procedures and change-management processes.
• Bachelor’s degree preferred.
• PowerShell/Microsoft Graph PowerShell SDK experience preferred.
• IT service management familiarity (ServiceNow) preferred.
• Certifications (SC-300/900, AZ-104, Security+) preferred.

Responsibilities

• Administer IAM systems including Entra, AD, AD-LDS, and ADFS.
• Manage service principals in Entra per standards and workflows.
• Create Entra Enterprise Applications and assign signs-on configurations.
• Review API permissions and enforce least privilege and approvals.
• Coordinate secrets management for client secrets and certs.
• Evaluate new application requests for IAM security alignment.
• Assess authentication requirements and dependencies.
• Review user provisioning methods (SCIM, JIT, manual).
• Troubleshoot AD account lockouts and auth failures.
• Support authentication technologies like YubiKey, HYPR, LastPass.
• Assist with recovery of AD objects.
• Document requests, incidents, and resolutions.
• Escalate complex issues to engineering/security.
• Maintain compliance with security policies and change management.
• Provide guidance on IAM governance decisions.
• Engage with end users and app teams for IAM intake procedures.

Skills

Analytical thinking

Troubleshooting

Communication

Organization

Team collaboration

Education

Associate degree in IT or related field

Bachelor's degree in IT or cybersecurity preferred

Tools

Microsoft Entra

Active Directory

AD-LDS

ADFS

PowerShell

Job description

Overview

We are seeking a Junior IT Administrator to support the daily operations, administration, and maintenance of enterprise identity and access management (IAM) systems. This entry-level position will work with Microsoft Entra, Active Directory, Active Directory Lightweight Directory Services (AD-LDS), and Active Directory Federation Services (ADFS) to support secure authentication, authorization, and identity management across the organization.

The Junior IT Administrator will handle routine IAM service requests, troubleshoot authentication and access issues, support application integration reviews, and assist with identity governance activities. This role works closely with application teams, security personnel, and other technology stakeholders to ensure identity solutions follow established security standards, approval processes, and least-privilege principles.

The ideal candidate will have foundational experience in IT operations, systems administration, or technical support, along with an understanding of Active Directory, authentication technologies, and IAM best practices. Success in this position requires strong troubleshooting skills, attention to detail, effective communication, and the ability to recognize when issues require escalation.

Benefits

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: 70k-100k

**Can be 100% remote in TX, VA, MD, DC, or FL**

**High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)**

Responsibilities

• Administer and support enterprise identity and access management systems, including Microsoft Entra, Active Directory, AD-LDS, and ADFS.

• Provision, modify, and deprovision service principals in Microsoft Entra according to established standards and approval workflows.

• Create and manage Microsoft Entra Enterprise Applications, including sign-on configurations, application ownership, and user or group assignments.

• Review and assign API permissions while ensuring access follows least-privilege principles and established approval requirements.

• Coordinate with secrets management teams to track and renew client secrets and certificates before expiration.

• Review new application requests for alignment with IAM security standards and best practices.

• Evaluate application authentication and integration requirements, identifying technical dependencies, security concerns, and potential gaps.

• Assess application support for authentication protocols, including OpenID Connect (OIDC), SAML, and Integrated Windows Authentication.

• Review application user provisioning and deprovisioning methods, including SCIM, Just-In-Time provisioning, and manual processes.

• Identify excessive or unsupported application permissions and document findings for governance review.

• Provide technical information and recommendations to support application governance and integration decisions.

• Respond to IAM consultation requests and provide guidance regarding Microsoft Entra, Active Directory, and AD-LDS services.

• Research and document security group information, including ownership, membership, naming conventions, and descriptions.

• Perform routine administration of service principals, service accounts, and security groups when automated processes are unavailable.

• Investigate and troubleshoot identity synchronization issues between Microsoft Entra and Active Directory.

• Guide users and application teams through established IAM request and intake procedures.

• Troubleshoot recurring Active Directory account lockouts and identify potential sources of authentication failures.

• Investigate and resolve authentication issues involving user accounts, service accounts, and other non-human identities.

• Support troubleshooting of authentication technologies, including YubiKey, HYPR, and LastPass.

• Investigate authentication failures associated with Conditional Access policy evaluations.

• Assist with recovery of Active Directory user, group, and computer objects.

• Document service requests, incidents, troubleshooting activities, and resolutions in accordance with established procedures.

• Escalate complex technical issues or security concerns to appropriate engineering and security teams.

• Maintain compliance with organizational security policies, identity governance standards, and established change management procedures.

• Perform other duties as assigned.

Qualifications

• Associate degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education, training, and experience.

• 1–3 years of experience in IT operations, technical support, service desk, systems administration, or a related technical role.

• Working knowledge of Active Directory, including user accounts, security groups, computer objects, organizational units, and authentication fundamentals.

• Foundational understanding of identity and access management concepts, including authentication, authorization, single sign-on (SSO), multifactor authentication (MFA), and least-privilege access.

• Familiarity with the Microsoft Entra administration center and basic management of users, groups, and enterprise applications.

• Ability to troubleshoot technical issues, isolate potential causes, and document findings accurately.

• Strong analytical, problem-solving, and organizational skills.

• Ability to follow documented technical procedures, change management requirements, and established approval workflows.

• Strong attention to detail and commitment to maintaining security and operational accuracy.

• Effective written and verbal communication skills.

• Ability to collaborate with end users, application teams, security personnel, and technical stakeholders.

• Ability to recognize technical issues that require escalation and communicate findings appropriately.

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred.

• Hands‑on experience administering service principals, app registrations, and Enterprise Applications in Microsoft Entra preferred.

• Knowledge of API permission management, application consent models, and access controls preferred.

• Experience with ADFS relying party trusts, claim rules, and SAML certificate management preferred.

• Familiarity with authentication protocols such as SAML 2.0, OIDC, OAuth 2.0, Kerberos, and Integrated Windows Authentication preferred.

• Experience with SCIM or Just‑In‑Time user provisioning preferred.

• Experience supporting passwordless authentication technologies, including YubiKey (FIDO2/PIV) and HYPR, preferred.

• Familiarity with AD‑LDS, Microsoft Entra Connect, and directory synchronization technologies preferred.

• Experience using PowerShell or Microsoft Graph PowerShell SDK for reporting and identity administration preferred.

• Experience with IT service management platforms such as ServiceNow for incident, request, and change management preferred.

• Understanding of identity governance practices, including access certifications, entitlement management, and Conditional Access policies preferred.

• Microsoft SC-300, SC-900, AZ-104, CompTIA Security+, or similar technical certifications preferred.

** BRMi will not sponsor applicants for work visas for this position.**

**This is a W2 opportunity only

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.