System Engineer

Franklin Fitch; Houston (TX); On-site; USD 130,000 - 170,000; Full time

Job summary

Franklin Fitch is seeking a Senior Identity & Access Management Engineer to lead the administration, security, and ongoing improvement of enterprise identity platforms. This role emphasizes Microsoft Entra ID and Active Directory, with responsibilities spanning governance, access controls, and privileged access management.

Ideal candidates bring extensive IAM experience, strong Entra ID and AD administration skills, and a track record with PIM, MFA, SSO, SAML, OAuth, and OIDC.

Qualifications

• Extensive Identity & Access Management experience.
• Strong hands-on expertise with Microsoft Entra ID (essential).
• Strong Active Directory administration experience within enterprise environments.

Responsibilities

• Manage and support Microsoft Entra ID, Active Directory, and Okta environments.
• Lead identity infrastructure initiatives, including Active Directory tiering and control plane security.
• Configure and maintain Conditional Access, Privileged Identity Management (PIM), RBAC, MFA, SSO, and identity governance.
• Administer Active Directory, DNS, Group Policy, Organizational Units, FSMO roles, and disaster recovery.
• Support Microsoft Intune, endpoint management, and PowerShell automation.
• Design and support Okta integrations and enterprise identity solutions.
• Collaborate with infrastructure and security teams to improve identity security and operational efficiency.

Skills

Identity & Access Management

Microsoft Entra ID

Active Directory

Okta

CyberArk

PowerShell

RBAC

MFA

SSO

Conditional Access

PIM

SAML

OAuth

OIDC

Education

Bachelor's degree in Computer Science/IT or equivalent

Tools

Microsoft Entra ID

Active Directory

Okta

CyberArk

PowerShell

Job description

We're working with a global organization looking for a Systems Engineer who will act as the Senior Identity & Access Management Engineer and lead the administration, security, and continuous improvement of enterprise identity platforms. This role is heavily focused on Microsoft Entra ID and Active Directory, with responsibility for modernizing identity infrastructure, strengthening privileged access, and supporting enterprise security initiatives.

Key Responsibilities

• Manage and support Microsoft Entra ID, Active Directory, and Okta environments.
• Lead identity infrastructure initiatives, including Active Directory tiering and control plane security.
• Configure and maintain Conditional Access, Privileged Identity Management (PIM), RBAC, MFA, SSO, and identity governance.
• Administer Active Directory, DNS, Group Policy, Organizational Units, FSMO roles, and disaster recovery.
• Support Microsoft Intune, endpoint management, and PowerShell automation.
• Design and support Okta integrations and enterprise identity solutions.
• Collaborate with infrastructure and security teams to improve identity security and operational efficiency.

Required Experience

• Extensive Identity & Access Management experience.
• Strong hands‑on expertise with Microsoft Entra ID (essential).
• Strong Active Directory administration experience within enterprise environments.
• Experience with Conditional Access, PIM, RBAC, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with CyberArk (required).

Nice to Have

• Okta administration and application integrations.
• Microsoft Intune and Windows Server administration.
• Microsoft, Azure, Okta, or CyberArk certifications.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or equivalent experience.

Travel

• Up to 10% travel as required.

Key Technologies

Microsoft Entra ID, Active Directory, CyberArk, Okta, Intune, Windows Server, PowerShell, Conditional Access, PIM, MFA, SSO, SAML, OAuth, OIDC, RBAC, DNS, Group Policy.