Entra ID Authentication Administrator

LLNL•Livermore, CA

2d•Hybrid

About The Position

Lawrence Livermore National Laboratory is hiring an Entra ID Authentication Administrator for the Information Technology Solutions Division within the Computing Directorate, supporting the Livermore Information Technology Program. The role configures, maintains, and supports SAML- and OAuth-based authentication for enterprise applications and Microsoft Entra ID authentication services. The position may offer a hybrid schedule, including one or more work-from-home days per week after a probationary period; the schedule depends on team and organizational needs. The position may be filled at either the 393.1 or 393.2 level, with additional responsibilities at the higher level. The role supports critical enterprise services, works directly with end users and application and engineering teams, and participates in off-hours support and a regular 24/7 on-call rotation. This is a Career Indefinite position open to Laboratory employees and external candidates. A DOE Q-level security clearance, which requires U.S. citizenship, is required.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance; U.S. citizenship is required for this clearance.
Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or an equivalent combination of education and related experience.
Broad and in-depth experience operating and supporting Entra ID in an enterprise setting.
Ability to work in a dynamic technical team environment with competing priorities, tight deadlines, and the high-pressure demands of operating a critical, complex system.
Broad and in-depth experience administering application authentication integration using SAML and/or OAuth/OIDC in Entra ID.
Proficient written and verbal communication and strong interpersonal skills, including the ability to interact with management and staff at all levels and with external vendors, contractors, service providers, and consultants.
Ability to work off-hours and on-call and respond to service alerts from monitoring systems, intermittently as needed or as part of a rotation.
Proficiency managing users, groups, applications, or hybrid identity using Entra Connect.
Experience with Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and/or Certificate-Based Authentication (CBA).
At the 393.2 level, significant experience collaborating with external teams and organizations supporting authentication-related services.
At the 393.2 level, significant knowledge and experience with PowerShell or similar automation platforms for administering Microsoft systems and services.
At the 393.2 level, highly advanced ability to provide innovative approaches and apply new technologies to broadly defined tasks and projects.

Nice To Haves

Broad and in-depth experience administering on-premises Active Directory.
Broad and in-depth experience administering Windows server environments, including deployment, patching, monitoring, backup, or repair.
Broad experience with cloud platforms.
Experience implementing NIST 800-63 levels of assurance.

Responsibilities

Design, implement, and support Microsoft Entra ID authentication services.
Work with engineers and administrators to operate and maintain critical enterprise services.
Interface directly with end users and collaborate with application and engineering teams on root cause analysis of reported problems.
Recommend, justify, and implement service and system improvements using an accepted change control methodology.
Develop creative solutions and resolve problems promptly and proactively while collaborating with a diverse group.
Meet service level agreements and maintain high levels of service reliability.
Use scripting and automation to address common problems and reduce operational overhead.
Support critical systems off-hours as needed and participate in a regular 24/7 on-call rotation.
Perform other duties as assigned.
At the 393.2 level, manage multiple complex tasks and customer and stakeholder priorities, ensuring deadlines are met while leveraging team member skills.
At the 393.2 level, use technology and develop procedures to improve authentication service delivery.