System Administrator

Provide senior-level administration and governance of Microsoft Entra identity services, ensuring secure identity lifecycle management, access governance, and application authentication across Microsoft 365 environments. This role plays a critical function in securing access to Copilot and AI services by enforcing identity controls and preventing unauthorized access or identity sprawl. Preferred location with hybrid work schedule: Kansas City, KS Job Duties and Responsibilities Administer access lifecycle for cloud identities within Microsoft Entra, including access provisioning, deprovisioning, and role-based access control after synchronization from on-prem Active Directory Manage Microsoft Entra application registrations and enterprise applications, including permissions, consent, and ownership governance Oversee certificate and client secret lifecycle management for cloud-based applications and integrations Partner with the Identity team to support and maintain the AD sync utility tool, ensuring reliable and accurate synchronization of identities to Microsoft 365 Monitor and validate identity synchronization outcomes, troubleshooting sync issues and data inconsistencies between on-prem AD and Entra ID Design and enforce Conditional Access policies and authentication controls to secure access to Microsoft 365 resources Conduct access reviews and enforce least-privilege access across cloud applications and services Manage identity governance capabilities including entitlement management, access packages, and automated access assignments Evaluate and secure identity configurations supporting Microsoft 365, Copilot, and AI-enabled services Review and control application permissions to prevent excessive or inappropriate access to organizational data Support secure authentication and authorization scenarios for Copilot, AI agents, and integrated applications Identify, assess, and remediate identity-related risks, including excessive permissions, stale accounts, and misconfigurations Serve as Tier 3 escalation point for Entra identity and access issues Collaborate with security, compliance, IAM, and application teams to align cloud identity governance with enterprise standards Develop and maintain documentation, standards, and operational procedures specific to cloud identity and access management Perform other duties as assigned Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent combination of education and experience) 5–8 years of Microsoft 365 or identity platform experience Experience with Entra ID governance, conditional access, and application security Experience with Microsoft Entra ID and identity governance frameworks Strong understanding of identity and access management principles Ability to manage complex identity environments at scale Strong analytical, troubleshooting, and communication skills Ability to translate technical concepts into clear, business-friendly guidance Strong documentation, communication, and collaboration skills Ability to work independently with minimal day-to-day direction while partnering effectively across teams Able to travel 5-15% of the time An Equal Opportunity Employer including Disabled/Veterans #J-18808-Ljbffr