Systems Engineer

ClearpointCo; Houston (TX); On-site; USD 140,000 - 145,000; Full time

Job summary

ClearpointCo in Houston is seeking a Systems Engineer to serve as a technical lead for IAM design, implementation, administration, operation, and support, focusing on Microsoft Entra ID, Active Directory, and Okta to deliver secure identity solutions.

You will manage PIM, MFA, SSPR, and Intune-related tasks, develop PowerShell scripts, and maintain large AD environments while following best-practice IAM principles.

Qualifications

• The job requires at least 5 years in IAM, infrastructure, or related technical fields.
• Experience with Azure AD/Entra ID and Okta strongly preferred.
• Strong PowerShell scripting and automation capabilities are required.

Responsibilities

• Lead IAM design and implementation for Entra ID, AD, and Okta.
• Manage PIM configurations and RBAC across Azure resources.
• Administer AD DS, DNS, GPOs and disaster recovery planning.
• Develop PowerShell scripts to automate admin tasks.
• Monitor new IAM capabilities and propose improvements.
• Ensure least-privilege access and security best practices.

Skills

IAM

Entra ID/Azure AD

Active Directory

Okta

PowerShell

PIM MFA SSPR

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Entra ID

Azure Active Directory

Okta

Group Policy

PowerShell scripting

Job description

Title: Systems Engineer

Location: Houston, Texas

Type: Direct Hire

Salary: $140,000 - $145,000

Summary

The Systems Engineer will serve as a technical lead and subject matter expert responsible for the design, architecture, implementation, administration, operation, and ongoing support of Identity and Access Management (IAM) solutions. This role will focus on leveraging Microsoft Entra ID, Active Directory, and Okta to deliver secure, scalable, and effective identity and access management capabilities.

Duties

• Demonstrate advanced knowledge of Microsoft Entra ID features and capabilities, including Conditional Access Policies, Privileged Identity Management (PIM), and Application Registrations.
• Manage and maintain PIM configurations, including the assignment and administration of roles and IAM permissions across Azure Management Groups, Subscriptions, and individual Resources.
• Manage Application Registrations, Enterprise Applications, Service Principal Names (SPNs), and Managed Identities, ensuring adherence to least-privilege principles when assigning Microsoft Graph API permissions.
• Maintain and support identity security capabilities, including Multi-Factor Authentication (MFA), Self-Service Password Reset (SSPR), and Windows Hello for Business (WHfB).
• Develop and maintain PowerShell scripts to support administrative tasks, automate processes, and schedule data management activities within Azure.
• Administer and maintain Microsoft Intune policies and Windows Autopilot configurations.
• Monitor new Entra ID functionality, emerging security practices, and industry developments, recommending enhancements and improvements to existing solutions.
• Administer and support large-scale Active Directory environments spanning multiple geographic locations, numerous domain controllers, and 5,000+ users.
• Maintain expertise in Active Directory infrastructure, including DNS, Group Policy Objects (GPOs), user accounts, organizational units (OUs), and directory administration.
• Apply Microsoft security tiering methodologies and demonstrate a solid understanding of Identity and Access Management (IAM) and Privileged Access Management (PAM) principles.
• Configure and maintain delegated permissions throughout the Active Directory domain and OU hierarchy.
• Create and manage PowerShell scripts, automation processes, and scheduled tasks to streamline administrative operations.
• Understand and execute Active Directory disaster recovery procedures, including the steps required to restore domain services following a major outage or disaster.
• Demonstrate comprehensive knowledge of IAM standards and technologies, including identity federation, Single Sign-On (SSO), SAML, OAuth, OpenID Connect (OIDC), MFA, Role-Based Access Control (RBAC), and least-privilege access principles.
• Serve as an Okta subject matter expert, providing guidance on application integrations, IAM capabilities, platform functionality, and the Okta product roadmap.
• Architect, configure, and deploy Okta platform solutions that support the overall technical architecture and meet customer business and technical requirements.
• Lead and assist with integrating customer applications into Okta-based IAM environments, identifying and resolving technical challenges throughout the integration lifecycle, including before, during, and after implementation.

Requirements

• Minimum of 5 years of relevant, progressively responsible professional experience in Identity and Access Management, infrastructure, or a related technical discipline.
• Oversee Azure infrastructure administration, including user accounts, security groups, conditional access policies, Intune, mobile device management (MDM), and endpoint security.
• Support and maintain Windows Server environments, with experience spanning Windows Server 2016 through Windows Server 2025.
• Understand and manage Flexible Single Master Operations (FSMO) roles to preserve Active Directory domain security, stability, and integrity.
• Experience with CyberArk is a plus.
• Familiarity with Rubrik is a plus.
• Microsoft, Azure, and/or Okta certifications are highly desirable.

Education

• Bachelor's degree in Computer Science or a related discipline, or an equivalent combination of education, training, and professional experience.