Identity and Access Administrator
About The Position
The Identity and Access Administrator executes and optimizes a cloud identity ecosystem aligned with organizational goals to support the security, reliability, and scalability of NITOAD’s hybrid-cloud environment. The role administers identity services across on-premises Active Directory and Microsoft Entra ID, maintains enterprise Active Directory infrastructure, monitors and remediates identity security risks, and configures access controls. It also provides advanced Tier-3 support to IT staff nationwide, maintains technical documentation, and leads or collaborates on Microsoft Active Directory projects. This is an excepted-service position without competitive civil service tenure. Employment is contingent on a satisfactory FBI name and fingerprint background check. The position was announced October 15, 2026, is subject to the availability of funds, and is open until filled. More than one position may be filled.
Requirements
- High school diploma or equivalent.
- Three years of general experience; relevant accredited coursework may substitute for part of this experience.
- Four years of specialized experience; education may substitute for part of this experience.
- At least three years of experience with Microsoft Entra (Azure), including Identity, Licensing, and Microsoft Purview.
- Strong understanding of identity security best practices, least privilege, and role-based access control.
- Advanced experience administering, designing, implementing, and supporting Microsoft Active Directory Domain Services (AD DS) environments, including configuring and troubleshooting domain controllers.
- Satisfactory FBI name and fingerprint background check.
Responsibilities
- Administer and manage the end-user identity lifecycle across the on-premises Active Directory and Microsoft Entra ID hybrid environment.
- Manage enterprise Active Directory servers, including physical and virtual domain controllers, replication health, patching, backups, and service availability.
- Monitor identity security posture and remediate risks, including risky sign-ins, compromised accounts, behavioral anomalies, and stale objects.
- Administer enterprise Privilege Access Management (PAM) and third-party Active Directory management tools.
- Configure Microsoft Entra conditional access policies, multifactor authentication (MFA), privileged identity management, and identity protection controls.
- Provide Tier-3 technical support and troubleshooting for IT staff nationwide.
- Develop and maintain infrastructure diagrams, installation documentation, upgrade assessments, and knowledge-base articles.
- Lead Microsoft Active Directory-related projects independently or in collaboration with team members.
Benefits
- Retirement benefits under the Federal Employees Retirement System (FERS).
- Optional participation in the Federal Employees Health Benefits (FEHB) program.
- Optional participation in the Federal Employees Dental and Vision Insurance Program (FEDVIP).
- Optional participation in the Federal Employees’ Group Life Insurance (FEGLI) program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
High school or GED
