Technology Support Analyst - Identity Management

SWCA Environmental Consultants; Broomfield (CO); Hybrid; USD 85,000 - 110,000; Full time

Job summary

SWCA Environmental Consultants is seeking a Technology Support Analyst - Identity Management to administer user identities, access rights, authentication services, and lifecycle processes across SWCA's technology environment. You will partner with HR, Information Security, Operations, and leaders to ensure secure and timely access for employees throughout their lifecycle.

The role supports provisioning/deprovisioning, Entra ID, SSO, MFA, and identity governance, balancing security with a

Qualifications

• Associate's Degree or equivalent required.
• 3 years of IAM, account administration, onboarding/offboarding workflows, or enterprise app administration.
• Experience with Microsoft 365 and Entra ID administration.
• Knowledge of RBAC, least-privilege, and access governance.
• Experience with SSO, MFA, Conditional Access, and user authentication technologies.
• Experience administering SaaS apps and user permissions.
• Understanding of information security principles and compliance requirements.

Responsibilities

• Provide advanced tier 1 and 2 troubleshooting and support for identity and access issues.
• Onboard/offboard employees with timely access provisioning and deprovisioning.
• Manage Microsoft Entra ID, SSO, MFA, and passwordless authentication configurations.
• Administer enterprise app integrations and RBAC settings.
• Coordinate access reviews and support audits and security assessments.
• Produce metrics on onboarding, provisioning, and access governance.

Skills

IAM

RBAC

MFA

SSO

Entra ID

Microsoft 365

Access governance

SaaS administration

Passwordless

Auditing

Education

Associate's Degree (A.A.) or equivalent

Bachelor's degree

Tools

Freshservice

Microsoft Intune

PowerShell

Microsoft 365 Admin

Job description

About the opportunity

SWCA Environmental Consultants seeks a Technology Support Analyst - Identity Management to support our growing Technology Team. This role is responsible for administering and governing user identities, access rights, authentication services, and employee technology lifecycle processes across SWCA's technology environment. This role serves as a key partner to Human Resources, Information Security, Technology Operations, and business leaders to ensure employees have secure, timely, and appropriate access to technology resources throughout their employment lifecycle. This position supports user provisioning and deprovisioning, role-based access administration, Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), enterprise application access management, and identity governance processes. This role helps maintain alignment with organizational security standards while delivering an exceptional employee experience. Success in this role requires strong attention to detail, a security-first mindset, excellent customer service skills, and the ability to manage a high volume of requests while balancing security, compliance, and operational efficiency.

This is a full-time, regular (with benefits), salaries/exempt position based in our Broomfield, Colorado office with options for a hybrid or distributed (=remote) working environment.

Application Deadline: Applications are reviewed on a rolling basis, and interviews may be scheduled as qualified candidates are identified. This position may close without prior notice once a strong candidate pool is established.

What you will accomplish

• Provides advanced tier one and tier two troubleshooting and support for hardware, software, and network issues, ensuring timely resolution for end users.
• Delivers deskside and remote assistance to employees, addressing technical problems and maintaining high levels of customer service.
• Escalates unresolved or complex technical issues to specialized teams, documenting actions and ensuring follow-through until resolution.
• Installs, configures, and upgrades workstations, peripherals, and authorized software in accordance with company standards and security policies.
• Conducts user training and onboarding sessions, educating employees on technology usage, security practices, and system capabilities.
• Monitors service desk queues, prioritizes support requests, and meets established service level agreements to ensure operational efficiency.
• Maintains detailed records of support activities, asset inventories, and system configurations using organizational tracking tools.
• Assists with routine maintenance tasks such as software updates, patch management, and system backups to uphold reliability and security.
• Collaborates with cross-functional teams to identify recurring issues, recommend process improvements, and enhance support strategies.
• Communicates technical concepts clearly and professionally to non-technical users, fostering positive user experiences and technology adoption.
• Follows applicable federal, Tribal, state, local, industry, contractual, and company regulations, standards, and specifications.
• Performs related work as assigned.

Additional Job-Specific Responsibilities

• Coordinate identity and access activities for employee onboarding, transfers, promotions, organizational changes, and offboarding, ensuring access is provisioned, modified, or removed in accordance with approved requirements.
• Administer user accounts, security groups, distribution lists, shared mailboxes, and enterprise application access.
• Administer Microsoft Entra ID and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, passwordless authentication, and related identity security controls.
• Configure and maintain enterprise application integrations and authentication methods.
• Support role-based access control (RBAC), least-privilege access, identity governance, and privileged access management initiatives.
• Validate access requests against documented business justification, approval workflows, and security requirements.
• Conduct periodic access reviews and support internal and external audits, compliance reviews, and security assessments.
• Identify unauthorized or excessive permissions and coordinate appropriate remediation.
• Produce metrics related to employee onboarding, account provisioning, access administration, and identity governance activities.

Experience and qualifications for success

• Associate's Degree (A.A.) or equivalent from a two-year college or technical school.
• Three (3) years of relevant industry experience including identity and access management, account administration, employee onboarding/offboarding workflows, and/or enterprise application administration. This also includes experience working in a customer-focused technology services environment.
• Experience administering Microsoft 365 and Microsoft Entra ID.
• Working knowledge of identity and access management concepts and practices, including role-based access control (RBAC), least-privilege access, and access governance.
• Experience supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and user authentication technologies.
• Experience administering SaaS applications and user permissions.
• Understanding of information security principles and compliance requirements.

Preferred Qualifications

• Bachelors degree in a relevant field.
• A+, Cloud+, and ITIL Foundations certifications.
• Five (5) years of relevant industry experience.
• Microsoft Fundamentals or related Microsoft certifications.
• Basic PowerShell scripting and automation experience.
• Familiarity with Microsoft Intune MDM platform and IT service management systems such as Freshservice

Knowledge, Skills and Abilities:

• Strong analytical and troubleshooting skills.
• Exceptional attention to detail and accuracy.
• Ability to manage sensitive and confidential information.
• Strong organizational and time-management skills.
• Excellent verbal and written communication abilities.
• Demonstrated commitment to customer service and continuous improvement.
• Ability to work independently and collaboratively across teams.