M365 & Identity Engineer, Lead

Amentum; City of Albany (NY); Remote; USD 115,000 - 143,000; Full time

Benefits offered by this job

Health insurance

Retirement benefits (401k)

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Lead M365 & Identity Engineer to design, deploy, optimize, and support Microsoft 365 and IAM across hybrid environments.

The role requires hands-on expertise with Entra ID, Active Directory, Exchange Online, and governance tooling, plus proficiency in PowerShell, Graph API, and automation to improve operations.

This US-remote role requires US citizenship and offers competitive compensation, benefits, and opportunities to lead IT teams on enterprise initiatives.

Qualifications

• Typically 8+ years hands-on M365 administration/engineering with a Bachelor’s degree.
• Experience in Identity & Access Management in enterprise environments; Okta experience preferred.
• Experience with Active Directory, Entra ID, External Identities (B2B), Conditional Access, RBAC, MFA, and identity lifecycle management.

Responsibilities

• Design, implement, and maintain M365 services including Exchange Online, Purview, OneDrive, Teams, and related services.
• Manage Entra ID identity services including CA, MFA, SSO integrations, and identity lifecycle processes.
• Manage Okta and other identity platforms.
• Support for email platforms including Exchange 2016/SE, Exchange Online, and Proofpoint.
• Develop and enforce M365 governance, security policies, and compliance configurations.
• Troubleshoot and resolve complex issues across M365, identity, and hybrid environments.
• Administer and enhance IAM tools and workflows (provisioning, deprovisioning, RBAC, privileged access).
• Implement automation using PowerShell or other scripting tools to improve efficiency.
• Monitor performance, security posture, and capacity for high availability.
• Partner with security, data center, and application teams; support integration and cross-functional initiatives.

Skills

PowerShell scripting

M365 administration

IAM & Entra ID

Exchange Online admin

Active Directory

Education

Bachelor’s degree in Computer Science or IT

Tools

Okta

Graph API

Power Automate

Exchange Online

Job description

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents.

The M365 & Identity Engineer, Lead will be responsible for designing, deploying, optimizing, and supporting Microsoft 365 and Identity. This role blends advanced Office 365 engineering expertise with Identity and Access Management (IAM) skills to ensure a secure, resilient, and scalable collaboration environment. The ideal candidate brings hands‑on experience with Microsoft 365 configuration, automation, identity lifecycle management, Active Directory and Entra ID, and enterprise security best practices. Working in a cross-cloud infrastructure, M365 Commercial and GCC High is required. This position is US Remote telework and US Citizenship is required.

Key Responsibilities:

• Design, implement, and maintain M365 services including Exchange Online, Purview, OneDrive, Teams, and secondary support for SharePoint Online, Power BI, Power Platform, and related services.
• Manage Entra ID identity services including Conditional Access, External Identities (B2B), MFA, SSO integrations, and identity lifecycle processes.
• Manage Okta and other company identity platforms.
• Support for company Email service platforms, including Microsoft Exchange 2016/SE, Exchange Online, and Proofpoint.
• Develop and enforce M365 governance, security policies, and compliance configurations.
• Troubleshoot and resolve complex issues across the M365 ecosystem, identity platform, and hybrid environments.
• Administer and enhance IAM tools and workflows, including provisioning, deprovisioning, RBAC, and privileged access management.
• Implement automation using PowerShell or other scripting tools to improve operational efficiency.
• Monitor system performance, security posture, and capacity to ensure high availability and reliability.
• Partner with security, data center, and application teams to support integration and cross-functional initiatives.
• Provide technical expertise during audits, risk assessments, and incident response activities.
• Create and maintain technical documentation, diagrams, and standard operating procedures.
• Lead teams of other IT professionals to accomplish small projects.
• Provide guidance or instruction to junior staff.
• Perform other duties as assigned.

Knowledge, Skills & Abilities:

• Proficiency with PowerShell and scripting for administration and automation.
• In-depth understanding of Microsoft 365 security, compliance, and governance tools (Purview, Defender, DLP, etc.).
• Solid knowledge of Exchange Online, Purview, SharePoint Online, Teams administration, and related services.
• Strong problem‑solving skills and ability to work independently or in teams.
• Strong communication and collaboration abilities.
• Analytical mindset with attention to detail.
• Ability to manage multiple priorities in a fast‑paced environment.
• Customer‑focused and service‑oriented approach.

Required Qualifications:

• Typically, 8+ years of hands‑on experience with M365 administration and engineering with Bachelor’s degree in Computer Science, Information Technology, or other related field.
• Experience in Identity & Access Management in enterprise environments. Okta experience preferred.
• Experience with Active Directory, Entra ID, External Identities (B2B), Conditional Access, RBAC, MFA, and identity lifecycle management.
• Experience supporting hybrid identity (On‑Premises Exchange, Entra ID Connect, federation, sync).
• US Citizenship is required.

Preferred Qualifications:

• Microsoft certifications such as MS‑102, SC‑300, SC‑100, or AZ‑104.
• Experience with Zero Trust frameworks and modern identity practices.
• Knowledge of identity governance solutions, including Okta.
• Familiarity with endpoint management (Intune) is a plus.
• Experience in creating automation workflows using Graph API or Power Automate.

Compensation Details:

$115k - $143k

The compensation range or hourly rate listed for this position is provided as a good‑faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview:

Our health and welfare benefits are designed to support you and your priorities. Offerings include:

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara‑O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Original Posting:

09/29/2026 - Until Filled

Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low‑income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters (https://postings.govdocs.com/#/vxSkbztPuAwwxfs) .