System Engineer

Franklin Fitch; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Franklin Fitch is seeking a Senior Identity & Access Management Engineer to lead administration, security, and continuous improvement of enterprise identity platforms, with a focus on Microsoft Entra ID and Active Directory. You will modernize identity infrastructure and strengthen privileged access.

You will collaborate with infrastructure and security teams to implement Conditional Access, PIM, MFA, SSO, and identity governance, while mentoring junior engineers and ensuring reliability across

Qualifications

• Extensive Identity & Access Management experience.
• Strong hands-on expertise with Microsoft Entra ID (essential).
• Strong Active Directory administration experience within enterprise environments.
• Experience with Conditional Access, PIM, RBAC, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with CyberArk (required).

Responsibilities

• Manage and support Microsoft Entra ID, Active Directory, and Okta environments.
• Lead identity infrastructure initiatives, including Active Directory tiering and control plane security.
• Configure and maintain Conditional Access, Privileged Identity Management (PIM), RBAC, MFA, SSO, and identity governance.
• Administer Active Directory, DNS, Group Policy, Organizational Units, FSMO roles, and disaster recovery.
• Support Microsoft Intune, endpoint management, and PowerShell automation.
• Design and support Okta integrations and enterprise identity solutions.
• Collaborate with infrastructure and security teams to improve identity security and operational efficiency.

Skills

Identity & Access Management

Active Directory administration

Security concepts

Conditional Access concepts

MFA & SSO

Education

Bachelor's degree in Computer Science or IT

Tools

Microsoft Entra ID

Okta

CyberArk

PowerShell

Microsoft Intune

Windows Server

Job description

We're working with a global organization looking for a Systems Engineer who will act as the Senior Identity & Access Management Engineer and lead the administration, security, and continuous improvement of enterprise identity platforms. This role is heavily focused on Microsoft Entra ID and Active Directory, with responsibility for modernizing identity infrastructure, strengthening privileged access, and supporting enterprise security initiatives.

Key Responsibilities

• Manage and support Microsoft Entra ID, Active Directory, and Okta environments.
• Lead identity infrastructure initiatives, including Active Directory tiering and control plane security.
• Configure and maintain Conditional Access, Privileged Identity Management (PIM), RBAC, MFA, SSO, and identity governance.
• Administer Active Directory, DNS, Group Policy, Organizational Units, FSMO roles, and disaster recovery.
• Support Microsoft Intune, endpoint management, and PowerShell automation.
• Design and support Okta integrations and enterprise identity solutions.
• Collaborate with infrastructure and security teams to improve identity security and operational efficiency.

Required Experience

• Extensive Identity & Access Management experience.
• Strong hands-on expertise with Microsoft Entra ID (essential).
• Strong Active Directory administration experience within enterprise environments.
• Experience with Conditional Access, PIM, RBAC, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with CyberArk (required).

Nice to Have

• Okta administration and application integrations.
• Microsoft Intune and Windows Server administration.
• Microsoft, Azure, Okta, or CyberArk certifications.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or equivalent experience.

Travel

• Up to 10% travel as required.

Key Technologies

Microsoft Entra ID, Active Directory, CyberArk, Okta, Intune, Windows Server, PowerShell, Conditional Access, PIM, MFA, SSO, SAML, OAuth, OIDC, RBAC, DNS, Group Policy.