Remote IAM Administrator — Entra & SSO Focus

System One, Inc.; Vienna (VA); Remote; USD 41,000 - 69,000; Full time

Job summary

System One, Inc. is seeking a Junior IAM Administrator for a remote contract role in Vienna, VA. You will provision and manage SPNs, enterprise apps, API permissions, and authentication configurations within Microsoft Entra and Active Directory environments.

You will coordinate secret management, review requests for IAM governance, and troubleshoot identity synchronization and authentication issues across Entra, AD, and related services. Strong documentation and end-user support skills required.

Qualifications

• Associate degree or higher in IT or related field.
• Experience with IT operations, service desk, or systems administration.

Responsibilities

• Provision and de-provision SPNs in Microsoft Entra per standards and workflows.
• Create and administer Enterprise Applications with sign-on settings and user/group assignments.
• Evaluate and assign API permissions with proper scope and approvals.
• Coordinate with Secrets Management for client secret/certificate renewals.
• Review new app requests against IAM best practices and governance.
• Evaluate IAM components and integration requirements of proposed applications.
• Identify support levels for authentication protocols (OIDC, SAML, IWA).
• Document provisioning models (SCIM/JIT/manual) and governance implications.
• Review permissions to flag excessive access.
• Field IAM requests and provide analytical information on Entra/AD components.
• Research and report on security group ownership and descriptions.
• Perform object management for service principals, accounts, and groups.
• Troubleshoot identity sync between Entra and AD.
• Provide direction on intake channels for IAM services.
• Troubleshoot AD lockouts and authentication failures across AD/Entra.
• Resolve end user issues with YubiKey, HYPR, LastPass.
• Assist with CA policy design and access governance concepts.
• Assist with AD recovery for objects.
• Ensure security and integrity of identity solutions.

Skills

Active Directory fundamentals

Authentication concepts (SSO, MFA)

Verbal and written communication

Troubleshooting and problem isolation

Documentation and reporting

End-user support

Ability to follow procedures and ITIL/

Education

Associate degree in Information Technology or related field

Bachelor's degree in Information Technology/C cybersecurity or related field

Equivalent combination of education, training and experience

Tools

Microsoft Entra admin center

Active Directory

AD-LDS

Entra Connect

YubiKey (FIDO2/PIV)

HYPR

LastPass

PowerShell

Microsoft Graph PowerShell SDK

ServiceNow

SCIM/Just-In-Time provisioning

Job description

System One, Inc. is seeking a Junior IAM Administrator for a remote contract role in Vienna, VA. You will provision and manage SPNs, enterprise apps, API permissions, and authentication configurations within Microsoft Entra and Active Directory environments.

You will coordinate secret management, review requests for IAM governance, and troubleshoot identity synchronization and authentication issues across Entra, AD, and related services. Strong documentation and end-user support skills required.