Oct 1, 2026 12 hr. ago

Systems Engineer – Directory Services (Active Directory / Entra ID)

Oct 1, 2026 12 hr. ago

Deltek Systems Engineer – Directory Services (Active Directory / Entra ID)

Key Responsibilities

Own the design, administration, and continuous improvement of Microsoft Entra ID and Active Directory, including user lifecycle management, hybrid identity, directory synchronization, and authentication services.
Manage Active Directory domain services, replication, domain controllers, DNS integration, FSMO roles, Group Policy, and overall directory health.
Design and support Conditional Access, MFA, passwordless authentication, and identity security controls aligned to Zero Trust principles.
Manage Enterprise Applications, App Registrations, SSO integrations (SAML, OAuth, OIDC), SCIM provisioning, and access automation.
Drive identity governance practices including RBAC, least-privilege access, access certifications, and integration with Saviynt.
Automate identity operations using PowerShell, Microsoft Graph, and workflow automation platforms to improve efficiency and user experience.

Messaging & Collaboration (Supporting Scope)

Administer Exchange Online, hybrid mail flow, and Microsoft Teams, including distribution lists, shared mailboxes, and transport rules.

Troubleshoot escalated issues related to mail delivery, Outlook, calendaring, and their integration with identity services.

Operations, Reliability, and Incident Management

Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring timely communication and adherence to SLAs.

Lead or participate in on-call rotation and major incident response as a senior escalation point.

Drive root cause analysis and problem management, translating recurring issues into permanent fixes and system improvements.

Automation and AI-Driven Process Improvement

Design and maintain PowerShell scripts and automation workflows (including Microsoft Graph API) that streamline identity and access operations end-to-end.

Champion an automation-first approach, identifying manual processes across identity platform operations that can be eliminated or self-serviced.

Leverage AI-powered tools such as Microsoft Copilot, scripting assistants, and workflow automation platforms to accelerate troubleshooting, generate scripts, improve documentation, and surface operational insights.

Apply AI to enhance identity governance activities such as access reviews, anomaly detection, and reporting.

User Experience and Continuous Improvement

Partner with service desk, endpoint, and security teams to resolve identity and access issues and elevate the overall user experience.

Analyze recurring access and authentication trends; build knowledge base content and self-service capabilities to reduce ticket volume.

Mentor junior team members on identity concepts, tooling, and troubleshooting methodology.

Qualifications :

3–5+ years of experience supporting enterprise Microsoft environments, with hands-on experience in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
Strong troubleshooting skills across identity, authentication, and messaging services.
Solid understanding of directory services, group policies, DNS, and access control models.
Basic scripting experience with PowerShell is required.

Required Qualifications

5+ years of experience supporting enterprise Microsoft identity environments, with hands-on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.

Advanced troubleshooting skills across identity, authentication, and access management.

Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).

Proficient in automation & scripting with PowerShell, AI agents using Copilot & Claude, including experience with Microsoft Graph API/SDK for automation.

Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.
Open to a US shift

Preferred Qualifications

Experience with identity governance concepts or platforms (e.g., Saviynt, SailPoint, Okta IGA, CyberArk) — access certifications, entitlement management, SoD.

Familiarity with Microsoft Defender for Office 365 and broader identity-related security controls.

Experience with audit, compliance, or access to attestation processes (e.g., SOX controls).

Experience using AI tools and developing agents (e.g., Microsoft Copilot) to improve operational efficiency and automation.

Microsoft certifications in Azure or Microsoft 365 (e.g., SC-300, MS-102) are a plus.

What awaits you if you consider this opportunity?

Skills