Remote IAM Admin — Junior (Entra/AD)

BRMi; Yorktown (VA); Remote; USD 45,000 - 65,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

Employer-Paid Life Insurance

Employer-Paid Disability Insurance

401(k)

Paid Time Off

Educational Assistance

Job summary

BRMi seeks a Junior IT Administrator to support IAM operations across Entra, AD, AD-LDS, and ADFS. You will handle routine service requests, troubleshoot authentication, assist with application integration reviews, and help enforce least-privilege identity controls.

You will collaborate with application teams, security personnel, and IT stakeholders to ensure secure, compliant identity solutions and governance. Remote-friendly, US-wide roles with opportunities to grow.

Qualifications

• Associate degree or equivalent in IT or related field.
• 1–3 years in IT operations or support.
• Foundational IAM concepts: SSO, MFA, least-privilege.
• Familiarity with Microsoft Entra admin center.
• Ability to follow procedures and document findings.
• Bachelor's degree preferred.
• Experience administering Entra service principals and Enterprise Applications preferred.
• Knowledge of API permission management and access controls preferred.
• Experience with ADFS relying party trusts and SAML cert management preferred.
• Familiarity with authentication protocols (SAML, OIDC, OAuth).
• Experience with passwordless tech (YubiKey, HYPR) preferred.
• Familiarity with AD-LDS, Entra Connect, and directory sync.
• PowerShell or Graph PowerShell for reporting preferred.
• ITSM platforms such as ServiceNow preferred.
• IAM governance practices and CA policies preferred.
• Certifications such as SC-300/SC-900/AZ-104/Security+ preferred.

Responsibilities

• Administer IAM systems: Entra, AD, AD-LDS, ADFS.
• Provision, modify, and deprovision service principals in Entra.
• Create Entra Enterprise Applications with sign-on and ownership.
• Coordinate with secrets management for client secrets and cert renewals.
• Review new application requests for IAM security alignment.
• Evaluate authentication requirements and identify security gaps.
• Assess support for OIDC, SAML, and Integrated Windows Authentication.
• Review user provisioning methods (SCIM, JIT, manual).
• Identify excessive permissions and document findings for governance.
• Provide guidance to support governance and integration decisions.
• Respond to IAM consultation requests.
• Document security group ownership and naming conventions.
• Administer service principals, app registrations, and Enterprise Applications.
• Investigate identity synchronization between Entra and AD.
• Guide users through IAM request procedures.
• Troubleshoot AD account lockouts and authentication failures.
• Resolve issues with passwordless authentication (YubiKey/HYPR).
• Investigate Conditional Access policy evaluations.
• Assist recovery of AD objects.
• Document requests, incidents, and resolutions per procedures.
• Maintain compliance with security policies and change management.

Skills

IT operations

Technical support

Service desk

Systems administration

Collaboration

Education

Associate degree in IT / CS

Bachelor's degree preferred

Tools

Active Directory

Microsoft Entra

AD-LDS

ADFS

PowerShell

Microsoft Graph PowerShell SDK

ServiceNow

Job description

BRMi seeks a Junior IT Administrator to support IAM operations across Entra, AD, AD-LDS, and ADFS. You will handle routine service requests, troubleshoot authentication, assist with application integration reviews, and help enforce least-privilege identity controls.

You will collaborate with application teams, security personnel, and IT stakeholders to ensure secure, compliant identity solutions and governance. Remote-friendly, US-wide roles with opportunities to grow.