Senior Systems Administrator, Identity

Title: Senior Systems Administrator, IdentitySalary: $95,000 - $125,000Location: Hybrid - In-Office 3 Days per WeekFounded in 1911, this global electrical equipment and grid technology organization employs approximately 3,000 people worldwide, with more than 2,000 employees based in its Chicago headquarters and manufacturing campus. For over a century, the company has designed and manufactured advanced switching, protection, and control solutions for electric power transmission and distribution systems, helping utilities and industrial customers build safer, more reliable, and intelligent electrical infrastructure.The Chicago location serves as the company's primary innovation, engineering, and manufacturing hub, where teams develop and produce medium and high voltage switching equipment, smart grid automation systems, energy storage solutions, and power quality technologies. This facility also houses advanced research and development capabilities focused on grid modernization, automation, and resiliency technologies designed to support a more sustainable and outage-resistant power grid.Position OverviewWe are seeking an experienced Senior Systems Administrator, Identity, to lead the administration, optimization, and continuous improvement of the organization's Identity and Access Management (IAM) infrastructure. This role will serve as a subject matter expert responsible for securing and managing user identities, authentication, authorization, privileged access, and identity governance across Microsoft Entra ID, Active Directory, Microsoft 365, cloud services, and integrated enterprise applications. The successful candidate will play a critical role in supporting Zero Trust initiatives, audit readiness, compliance requirements, and enterprise security objectives while driving automation and operational excellence.Key ResponsibilitiesAdminister and support enterprise identity platforms including Microsoft Entra ID, Active Directory, Microsoft 365 Identity Services, Privileged Identity Management (PIM), Identity Governance, Single Sign-On (SSO), Multifactor Authentication (MFA), Conditional Access, and hybrid identity synchronization.Manage the full identity lifecycle, including user provisioning, modifications, role assignments, access reviews, and deprovisioning activities in accordance with joiner, mover, leaver processes and security policies.Design, implement, and maintain role-based access controls (RBAC), least-privilege models, privileged access controls, access packages, entitlement management workflows, and identity governance processes.Configure and support authentication technologies including SSO, MFA, passwordless authentication, federation services, Conditional Access policies, and application access controls.Monitor identity-related logs, sign-in activity, privileged role assignments, alerts, and governance reports to identify security risks, operational issues, and policy violations.Troubleshoot complex authentication, authorization, synchronization, directory services, service account, and enterprise application access issues in collaboration with infrastructure, security, and support teams.Develop and maintain documentation including identity standards, operational procedures, configuration records, audit evidence, and technical runbooks.Apply cybersecurity best practices, company security standards, privacy requirements, and Zero Trust principles when administering identity and access services.Support identity modernization initiatives including lifecycle automation, application onboarding, governance enhancements, reporting improvements, and operational process optimization.Partner with internal and external auditors to provide access control evidence, privileged access documentation, identity governance records, and compliance support.Recommend and implement improvements to access request workflows, approval processes, automation capabilities, role design, and recertification programs.Provide technical expertise and guidance to Service Desk teams, application owners, project teams, and business stakeholders regarding identity management policies and procedures.Participate in incident response activities, root cause analysis investigations, remediation efforts, and continuous security improvement initiatives.QualificationsRequiredAssociate degree, college diploma, or equivalent education in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline; equivalent combinations of education and experience will be considered.5+ years of experience administering Microsoft-based hybrid identity environments, including Active Directory and Microsoft Entra ID.5+ years of experience in Identity and Access Management (IAM), security administration, infrastructure administration, or related technology environments.Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Security Engineer Associate, or comparable Microsoft identity certification, or ability to obtain certification within six months of hire.Hands-on experience with Microsoft Entra Privileged Identity Management (PIM), Conditional Access, Identity Governance, Lifecycle Workflows, Access Packages, Entitlement Management, and Hybrid Identity Synchronization.Deep understanding of IAM principles including authentication, authorization, RBAC, least privilege, SSO, MFA, privileged access, and identity lifecycle management.Strong experience administering Microsoft Entra ID, Active Directory, Microsoft 365 identity services, enterprise application access, service accounts, security groups, and licensing structures.Experience supporting audit, compliance, and governance initiatives in regulated or security-conscious environments.Proficiency with PowerShell, Microsoft Graph API, Kusto Query Language (KQL), automation tools, and service management processes.Strong analytical, troubleshooting, communication, documentation, and stakeholder management skills.PreferredBachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.Microsoft Certified: Azure Administrator Associate, Microsoft 365 Administrator, Security+, ITIL Foundation, or related cloud, security, or service management certifications.Experience working within global manufacturing, critical infrastructure, utility, industrial technology, or highly regulated business environments.Working knowledge of cloud security architecture, networking concepts, PKI and certificate management, application architecture, and security operations.Benefits- 401K with up to 6% matching and an additional 3% added even if nothing has been contributed- Bonus paid annually based on company and individual performance - 10%- 10 days of PTO- 5 Sick Days- 16 Paid Holidays 9 of which are during the Christmas holiday season.- Health Insurance- Vision Insurance- Dental Insurance