Entra ID Authentication Administrator

LLNL•Livermore, CA

3d•$125,310 - $185,640•Hybrid

About The Position

Lawrence Livermore National Laboratory is hiring an Entra ID Authentication Administrator in the Information Technology Solutions Division within the Computing Directorate, supporting the Livermore Information Technology Program. The role configures, maintains, and supports SAML- and OAuth-based authentication for enterprise applications and Microsoft Entra ID authentication services. The position may offer a hybrid schedule, with work-from-home flexibility one or more days per week after a probationary period; the schedule depends on team and organizational needs. Hiring may be at either the 393.1 or 393.2 level, based on knowledge and related experience, with additional responsibilities at the higher level. The administrator works with engineers and other administrators to operate and maintain critical enterprise services, interfaces with end users, and collaborates with application and engineering teams on root-cause analysis. The role includes improving services through change control, maintaining service reliability and service-level agreements, and using scripting and automation to reduce operational overhead. Off-hours support is required as needed, including participation in a regular 24/7 on-call rotation. This is a career-indefinite position. A DOE Q-level security clearance is required and requires U.S. citizenship. The position has annual salary ranges of $125,310–$153,444 at level 393.1 and $151,620–$185,640 at level 393.2.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance; U.S. citizenship is required.
Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or an equivalent combination of education and related experience.
Broad and in-depth experience operating and supporting Entra ID in an enterprise setting.
Ability to work in a dynamic technical team environment with competing priorities, tight deadlines, and the pressure of operating a critical, complex system.
Broad and in-depth experience administering application authentication integration using SAML and/or OAuth/OIDC in Entra ID.
Proficient written and verbal communication and strong interpersonal skills, including the ability to interact with management, staff, vendors, contractors, service providers, and consultants.
Ability to work off-hours and on-call and respond to service alerts from monitoring systems, intermittently as needed or as part of a rotation.
Proficiency managing users, groups, applications, or hybrid identity with Entra Connect.
Experience with Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and/or Certificate-Based Authentication (CBA).
At the 393.2 level, significant experience collaborating with external teams and organizations supporting authentication-related services.
At the 393.2 level, significant knowledge and experience with PowerShell or similar automation platforms for administering Microsoft systems and services.
At the 393.2 level, highly advanced ability to develop innovative approaches and apply new technologies to broadly defined tasks and projects.

Nice To Haves

Broad and in-depth experience administering on-premises Active Directory.
Broad and in-depth experience administering Windows server environments, including deployment, patching, monitoring, backup, or repair.
Broad experience with cloud platforms.
Experience implementing NIST 800-63 levels of assurance.

Responsibilities

Configure, maintain, and support SAML- and OAuth-based authentication for enterprise applications.
Design, implement, and support Microsoft Entra ID authentication services.
Work with engineers and administrators to operate and maintain critical enterprise services.
Interface with end users and collaborate with application and engineering teams to perform root-cause analysis of reported problems.
Recommend, justify, and implement service and system improvements using an accepted change-control methodology.
Design and deliver solutions, resolve problems proactively and in a timely manner, and collaborate within a diverse group.
Ensure service-level agreements are met and maintain high levels of service reliability.
Use scripting and automation to address common problems and reduce operational overhead.
Support critical systems off-hours as needed and participate in a regular 24/7 on-call rotation.
Perform other duties as assigned.
At the 393.2 level, manage multiple complex parallel tasks and stakeholder priorities, meet deadlines, and leverage team-member skills.
At the 393.2 level, use technology and develop procedures to improve authentication service delivery.