Systems Engineer, Infrastructure

HCC Service Company, Inc.; Houston (TX); On-site; USD 85,000 - 115,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive medical, vision, and dental benefits

401(k) plan with 6% company match

20 days of PTO and paid parental leave

Job summary

HCC Service Company, Inc. is seeking a Systems Engineer in Houston, TX for a hybrid role, primarily responsible for designing and implementing IAM solutions using Azure Entra ID and Okta.

The ideal candidate will have a bachelor's degree in Computer Science and at least 2 years of experience in the field. The position offers a comprehensive benefits package and opportunities for ongoing professional development.

Qualifications

• 2 years of relevant professional experience.
• Strong understanding of IAM concepts.
• Knowledge of CyberArk and Rubrik advantageous.

Responsibilities

• Design, architect, and implement access management solutions.
• Manage Azure infrastructure including accounts and security.
• Provide subject-matter expertise for Okta integrations.

Skills

Azure Entra ID capabilities

PowerShell scripting

Active Directory management

Intune policies management

Multifactor authentication

Identity and Access Management (IAM)

Microsoft Certified

Education

Bachelor’s degree in Computer Science or related field

Tools

Azure

Okta

CyberArk

Rubrik

Job description

Systems Engineer, Infrastructure

Location: Houston, TX (Hybrid 4:1)

Reports To: Manager, Identity and Access Management

Employment Type: Full time

Role Overview

Work as a technical lead and subject matter expert in designing, architecting, implementing, operating, and maintaining access management solutions using Entra ID, Active Directory, and Okta.

Key Responsibilities

• Proven expert knowledge of Azure Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager and Application Registrations.
• Strong understanding of PIM and the assignment of roles/IAM permissions on Management Groups, Subscriptions, and Resources.
• Azure Infrastructure management including user accounts, groups, conditional policies, Intune management, mobile device management, and endpoint security.
• Strong understanding of app registration, enterprise apps, SPNs, and managed identities with least‑privileged administration for Microsoft Graph API permissions.
• Proficiency in multifactor authentication, SSPR, and WHfB.
• PowerShell scripting, automation, and scheduling skills when working with Azure data.
• Good understanding of Intune policies management and Autopilot.
• Stay abreast of the latest Entra ID features, best practices, and security trends, and make recommendations for continuous improvement.
• Strong background in Active Directory across geographies with numerous domain controllers, AD sites, and a user base of 5000+.
• Strong understanding of DNS, GPOs, user object, and OU administration.
• Solid understanding of Microsoft Tiering, IAM, and PAM concepts.
• Strong knowledge of Windows Server operating systems from 2016 to 2025.
• Strong understanding of the FSMO roles for maintaining domain security and integrity.
• Strong understanding of delegating permissions across the domain OU structure.
• Solid understanding of domain recovery steps in the event of a disaster.
• Demonstrate knowledge of IAM concepts including identity federation, SSO, SAML, OAuth, OIDC, MFA, RBAC, and least privilege principles.
• Provide Okta subject‑matter expertise on application integration, IAM functionality, and Okta’s feature roadmap.
• Design and implement Okta platform configurations aligned with overall solution architecture and customer requirements.
• Drive and support customer application integrations into Okta‑based IAM solutions and troubleshoot technical issues before, during, and after integration.

What You Bring

• Bachelor’s degree in Computer Science, a related field, or equivalent education and/or experience.
• 2 years of relevant and progressive professional experience.
• Knowledge and experience of CyberArk advantageous.
• Knowledge and experience with Rubrik advantageous.
• Microsoft, Azure, or Okta certifications are highly beneficial.

Travel

Occasional travel (up to 10% of time).

What We Offer

• Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on the date of hire.
• Strong learning culture with ongoing development opportunities.
• Basic life and disability insurance.
• 401(k) plan with 6% company match.
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off.
• Paid parental leave.

Equal Opportunity Employer

TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances.