Senior Systems Administrator

Helion; Seattle (WA); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

31 Days PTO (vacation & sick)

10 paid holidays

401(k) match

Disability and life insurance

Parental leave

Wellness stipend

Job summary

Helion is seeking a seasoned Identity and Access Management Administrator to join our Seattle-based team. You will automate the identity lifecycle, manage Entra ID, AD, and M365, and safeguard access across the enterprise while partnering with HR, Legal, and other stakeholders.

You will lead security monitoring and incident response efforts, integrate with REST APIs and AI tools, and support end-user requests through Jira Service Management.

Qualifications

• 8+ years of systems administration experience spanning identity and access management, enterprise applications, and cybersecurity.
• Deep hands-on experience with user lifecycle management, SSO (SAML/OIDC), and SCIM provisioning in the Microsoft ecosystem; Atlassian, privileged identity management, and Purview experience a plus.
• Advanced PowerShell scripting, including Microsoft Graph, with Python or JavaScript for automation and API integrations.
• Hands-on experience with SIEM/MDR platforms, security monitoring, and incident response, plus working knowledge of PKI; audit support, AI tool governance, and networking fundamentals a plus.
• Self-directed communicator who balances ticket work against project deadlines without needing direction, and can support after-hours incident response when needed.

Responsibilities

• Administer and support existing automation for the identity lifecycle (joiner, mover, leaver) for employees, contractors, and service accounts, using SSO, MFA, conditional access, SCIM/API-based provisioning, and PowerShell
• Manage Entra ID, Active Directory, and Microsoft 365 identity services, enforcing least-privilege access and driving access reviews through remediation
• Detect and respond to security events using Microsoft Sentinel, partnering with managed detection and response teams on escalations, log source tuning and remediation through to closure
• Administer Microsoft 365 and Atlassian platforms, build integrations with REST APIs, webhooks, and middleware, and review new applications and AI tools for security before they enter the enterprise
• Respond to end user issues and action requests captured in our Jira Service Management ticket queue that relate to identity, access, enterprise apps, and security
• Produce process and procedure documentation and drive process improvement through effective analysis and collaboration with stakeholders

Skills

Identity & access management

Enterprise applications

Cybersecurity

PowerShell scripting

Security incident response

Tools

Entra ID

Active Directory

Microsoft 365

Atlassian

Purview

Jira Service Management

REST APIs

Job description

About Helion

We are a fusion power company based in Everett, WA, with the mission to build the world's first fusion power plant, enabling a future with unlimited clean electricity. Our vision is a world with clean, reliable, and affordable energy for everyone.
Since Helion's founding in 2013, we have raised $1.5 billion from long-time investors such as Sam Altman, Mithril, and Capricorn Investment Group as well as new investors including Thrive Capital, LightSpeed Venture Capital, SoftBank, and others to propel us forward. Our current prototype, Polaris, has reached record-breaking plasma temperatures of 150 million degrees Celsius (13 keV). Helion is continuing to iterate and on the path to the world's first fusion power plant, Orion.
This is a pivotal time to join Helion. You will tackle real-world challenges with a team that prizes urgency, rigor, ownership, and a commitment to delivering hard truths – values essential to achieving what no one has before. Together, we will change the future of energy, because the world can't wait.

What You Will Be Doing

Be part of the team who keeps Helion's team securely connected as we build toward commercial fusion power. This is a hands-on, builder role for someone who would rather automate a problem away than ticket it twice. You'll support the identity, security, and application systems that everyone here depends on, including automation, integration, onboarding, migrations, and decommissioning.

Your week splits roughly evenly between support and project work, including both responding to real-time requests and performing planned and break-fix deployments. You'll join a small, tight-knit team, take on a meaningful share of its load, and bring the scripting depth to reduce manual work. You'll be a trusted technical partner to HR, Legal, GSOC, and business teams, with a seat at the table on access, governance, and risk, and you'll be on the front line when security events happen.

This role reports to the Manager, Identity and Access Management and Enterprise Applications and is based onsite in Seattle, WA, with one remote day per week.

You Will

• Administer and support existing automation for the identity lifecycle (joiner, mover, leaver) for employees, contractors, and service accounts, using SSO, MFA, conditional access, SCIM/API-based provisioning, and PowerShell

• Manage Entra ID, Active Directory, and Microsoft 365 identity services, enforcing least-privilege access and driving access reviews through remediation

• Detect and respond to security events using Microsoft Sentinel, partnering with managed detection and response teams on escalations, log source tuning and remediation through to closure

• Administer Microsoft 365 and Atlassian platforms, build integrations with REST APIs, webhooks, and middleware, and review new applications and AI tools for security before they enter the enterprise

• Respond to end user issues and action requests captured in our Jira Service Management ticket queue that relate to identity, access, enterprise apps, and security

• Produce process and procedure documentation and drive process improvement through effective analysis and collaboration with stakeholders

Required Skills

• 8+ years of systems administration experience spanning identity and access management, enterprise applications, and cybersecurity

• Deep hands-on experience with user lifecycle management, SSO (SAML/OIDC), and SCIM provisioning in the Microsoft ecosystem; Atlassian, privileged identity management, and Purview experience a plus

• Advanced PowerShell scripting, including Microsoft Graph, with Python or JavaScript for automation and API integrations

• Hands-on experience with SIEM/MDR platforms, security monitoring, and incident response, plus working knowledge of PKI; audit support, AI tool governance, and networking fundamentals a plus

• Self-directed communicator who balances ticket work against project deadlines without needing direction, and can support after-hours incident response when needed

Benefits

Our total compensation package includes benefits, including but not limited to:

• Medical, Dental, and Vision plans for employees and their families

• 31 Days of PTO (21 vacation days and 10 sick days)

• 10 Paid holidays, plus company-wide winter break

• Up to 5% employer 401(k) match

• Short term disability, long term disability, and life insurance

• Paid parental leave and support (up to 16 weeks)

• Annual wellness stipend

Helion is an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you need assistance or an accommodation during the interview process, please let us know.