Senior Systems Administrator, Identity

S&C Electric Company; Chicago (IL); Hybrid; USD 97,000 - 128,000; Full time

Job summary

S&C Electric Company is seeking a Senior Systems Administrator, Identity, to secure and optimize our identity and access management across on-premises and cloud services. You'll work with Entra ID, Active Directory, and Microsoft 365 to enforce least-privilege access and strengthen security.

This role requires deep IAM expertise, hands-on scripting in PowerShell, and collaboration with audit and security teams.

Qualifications

• Associate degree or equivalent in IT, CS, IS, Cybersecurity, or related discipline.
• 5+ years administering Microsoft hybrid identity environments (AD/Entra ID).
• 5+ years in identity and access management or related tech role.
• Microsoft certifications SC-300 or Azure Security Engineer Associate (within 6 months).
• Experience with Entra Privileged Identity Management, CA, Identity Governance, lifecycle workflows.

Responsibilities

• Administer and support identity platforms including Entra ID, AD, and 365 identity services.
• Implement role-based access controls and least-privilege access.
• Support privileged access management, access reviews, and governance.
• Configure authentication controls: SSO, MFA, CA, passwordless, federation.
• Monitor alerts, logs, sign-in activity, and audit results for security risks.
• Troubleshoot identity issues with cross-team collaboration.
• Maintain identity management documentation and audit evidence.
• Support incident response and remediation for IAM controls.
• Provide guidance on identity procedures to service desks and stakeholders.

Skills

Microsoft Entra ID

Active Directory

Microsoft 365 identity services

Privileged access management

Identity governance

Single sign-on

Multi-factor authentication

Conditional access

PowerShell

Microsoft Graph

Education

Associate degree or equivalent in IT

Bachelor's degree in IT (preferred)

Tools

Microsoft Entra ID

Azure Active Directory

Microsoft 365 Identity Services

PowerShell

Microsoft Graph

Job description

As an S&C Electric team member, you'll work on projects that have real-world impact. You'll help transform the grid for resilient and reliable power worldwide. S&C has more than a 100-year history of innovation and has been 100% employee-owned since 2012. We continue this legacy as a trusted, forward-thinking leader in the electrical industry. You will advance a safer, more reliable, and more resilient electrical grid. Our products help the grid adapt to severe weather and transition to clean energy. We're big enough to be a respected industry leader but small enough for you to impact our company directly. Our commitment gives you opportunities to impact on and off the job positively.

Join S&C to make an impact on tomorrow's energy challenges and become an employee-owner!

Hours

8:00 am - 5:00 pm (Mon-Fri) Hybrid 3 Days On-Site Requirement

Compensation

At S&C, we are dedicated to providing competitive and equitable compensation for all our team members, and we are committed to transparency in our pay practices. The estimated annual base salary range for this position in the United States is $ 96,514 - $127,886.88. Individual pay within this salary range is determined by several compensable factors, including performance, knowledge, job-related skills and experience, and relevant education or training. This role is also eligible for S&C's annual incentive plan (AIP), subject to eligibility criteria.

Senior Systems Administrator, Identity

The Senior Systems Administrator, Identity is responsible for the secure administration, support, and continuous improvement of the organization's identity and access management environment. This role manages user identities, authentication, authorization, access lifecycle processes, privileged access controls, identity governance, and hybrid identity services across Microsoft Entra ID, Active Directory, Microsoft 365, cloud services, and integrated enterprise applications. The position helps ensure that employees, contractors, applications, and systems have appropriate access based on business need, security standards, compliance requirements, and least-privilege principles.

Key Responsibilities

• Administer and support enterprise identity platforms, including Microsoft Entra ID, Active Directory, Microsoft 365 identity services, privileged access management, identity governance, single sign-on, multifactor authentication, conditional access, and hybrid identity synchronization.
• Provision, modify, review, and deprovision access in alignment with joiner, mover, leaver, and approved access request processes.
• Implement and maintain role-based access controls, least-privilege access, privileged access management, access reviews, access packages, lifecycle workflows, and identity governance processes.
• Configure and support authentication and authorization controls, including integrations, multifactor authentication, conditional access, passwordless authentication, single sign-on, federation, and application access policies.
• Monitor identity-related alerts, logs, reports, sign-in activity, access review results, and privileged role activity to identify policy exceptions, operational issues, and security risks.
• Troubleshoot complex identity, authentication, authorization, synchronization, service account, application access, and directory issues in partnership with infrastructure, security, application, and support teams.
• Maintain identity management documentation, operational procedures, configuration records, access standards, and audit evidence to support compliance and operational consistency.
• Apply company security standards, change management practices, privacy requirements, and Zero Trust principles when administering identity and access services.
• Support identity modernization initiatives, including identity lifecycle automation, application onboarding, privileged access improvements, access governance enhancements, identity reporting, and operational process improvements.
• Support internal and external audit requests by collecting identity, access, privileged role, and control evidence.
• Recommend improvements to access request workflows, approval models, reporting, automation, role design, and access recertification processes.
• Provide guidance to service desk teams, application owners, project teams, and business stakeholders on identity and access procedures.
• Participate in incident response, root cause analysis, and remediation activities related to identity and access controls.
• Communicate effectively and respectfully with others and contribute to a collaborative, inclusive workplace.
• Perform other responsibilities as assigned.

What you'll need to succeed

Required

• Associate degree, college diploma, or equivalent formal education in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Equivalent combination of education, training, and relevant work experience may be considered.
• 5+ years of experience administering Microsoft hybrid identity environments, including Active Directory and Microsoft Entra ID.
• 5+ years of experience in identity and access management, access administration, security operations, infrastructure administration, or a closely related technology role.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Security Engineer Associate, or comparable Microsoft identity certification (within 6 mos)
• Experience with Microsoft Entra Privileged Identity Management, Conditional Access, Identity Governance, lifecycle workflows, access packages, entitlement management, and hybrid identity synchronization.
• Deep knowledge of identity and access management concepts, including authentication, authorization, least privilege, role-based access control, single sign-on, multifactor authentication, conditional access, privileged access, and access lifecycle management.
• Hands-on experience administering Microsoft Entra ID, Active Directory, Microsoft 365 identity services, users, groups, roles, licenses, service accounts, and enterprise application access.
• Strong experience supporting audit and compliance activities
• Ability to analyze access requests, troubleshoot complex identity issues, interpret sign-in and audit logs, and apply security policies accurately.
• Understanding of identity governance practices, including access reviews, privileged access management, account recertification, joiner-mover-leaver controls, and audit evidence collection.
• Proficiency with PowerShell, Microsoft Graph, Kusto Query Language, service management processes, audit controls, security frameworks, and automation of identity lifecycle tasks.
• Ability to communicate technical information clearly to technical and non-technical audiences, document procedures, and provide guidance to stakeholders.
• Capable of embracing diversity and equity to contribute to a respectful and inclusive workplace.

Preferred

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Microsoft Certified: Azure Administrator Associate, Microsoft 365 Administrator certification, Security+, ITIL Foundation, or equivalent identity, cloud, security, or service management certification.
• Experience in a global, highly confidential, regulated, manufacturing, or professional-services environment.
• Working knowledge of cloud security, networking, PKI and certificates, application architecture, and security operations, supported by strong analytical, troubleshooting, documentation, presentation, and stakeholder-management skills.

S&C Electric is committed to equal-opportunity employment. All employees and applicants will be considered without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. If you are an individual with a disability and need an accommodation to complete the application, please email us at [e-mail].

No fixed Deadline

#LI-KD1