Tier II or III Microsoft Azure Identity and Access Management (IAM) Administrator

 SAIC is seeking a Tier II/III Microsoft Azure Identity and Access Management (IAM) Administrator to provide advanced technical support for U.S. Army 365 (A365) end users. In this role you will deliver deep expertise in Microsoft Entra ID (Azure AD), Azure Identity Protection, hybrid identity synchronization, and Microsoft 365 identity services. You will ensure Army customers’ data remain secure and protected across hybrid and cloud environments, troubleshoot complex identity and authentication issues, strengthen access controls, and partner with technical teams to maintain compliance and operational readiness under DoD and Zero Trust principles.

This is a Hybrid position. The individual will be required to work at the nearest US Army installation as required. 

JOB DESCRIPTION:

• Diagnose, troubleshoot, and resolve complex Tier II/III support tickets involving Microsoft Entra ID (Azure Active Directory), identity synchronization technologies, authentication and authorization services, and Microsoft 365 identity management.
• Administer identity management, federation, security management, Role-Based Access Control (RBAC), permissions management, and Multi-Factor Authentication (MFA) solutions.
• Manage and troubleshoot Active Directory Federation Services (ADFS), Microsoft Entra Connect (Azure AD Connect), Conditional Access policies, Single Sign-On (SSO), SCIM provisioning, and DoD PIV/credential management systems.
• Implement and enforce identity governance policies aligned with DoD requirements and Zero Trust architecture principles.
• Monitor, investigate, and respond to identity-related security incidents and alerts in coordination with security operations teams.
• Create, maintain, and improve technical documentation, standard operating procedures, and knowledge-base articles to support consistent service delivery.
• Collaborate with cross-functional teams (security, networking, endpoint, and application support) to resolve escalated issues and continuously improve identity services for Army 365 users.

REQUIRED EDUCATION AND EXPERIENCE:

• Bachelor’s degree and 5 years of related experience; an additional four (4) years of relevant experience may be accepted in lieu of a degree.
• Hands-on experience supporting DoD Microsoft 365 / Office 365 tenants (Army 365 / A365, GCC High, or equivalent DoD environments).
• Deep knowledge of enterprise identity and authentication protocols, including Kerberos, Public Key Infrastructure (PKI), OAuth 2.0 / OpenID Connect, SAML, and WS-Federation.
• Proven hands-on experience with ADFS, Microsoft Entra Connect, Conditional Access, SSO, SCIM, MFA solutions, and DoD credential / PIV management systems.
• Proficiency with PowerShell scripting for identity automation, troubleshooting, reporting, and bulk operations.
• Demonstrated experience with AESMP or comparable IT Service Management (ITSM) platforms (ServiceNow, BMC Remedy, or equivalent).
• Excellent problem-solving, technical documentation, and verbal/written communication skills.

REQUIRED CERTIFICATIONS:

• DoD 8140 IAT certification, Level I or higher, such as A+ CE, Network+ CE, Security+ CE, SecurityX, etc within 60 days of hire.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Information Security Administrator Associate (SC-401).
• Microsoft Certified: Azure Administrator Associate (AZ-104).

PREFERRED QUALIFICATIONS:

• Prior experience supporting Army 365 (A365) or other DoD GCC High / DoD IL4–IL5 Microsoft 365 tenants.
• Experience with Microsoft Entra ID Identity Governance, Privileged Identity Management (PIM), and Access Reviews.
• Familiarity with Zero Trust implementation frameworks and DoD Zero Trust reference architectures.
• Additional Microsoft certifications such as SC-200, SC-300 (already required), AZ-500, or MS-102.
• Experience with identity-related security tooling, SIEM integration, and incident response workflows.

REQUIRED CLEARANCE:

• Secret Clearance prior to start.
• Must be a current US Citizen.