IT Systems Administrator II

General Electric Credit Union•Blue Ash, OH

About The Position

General Electric Credit Union is a not-for-profit, member-owned full service financial institution headquartered in Cincinnati with branches in Ohio and Kentucky. At GECU, we pride ourselves on maintaining quality service, being an employee-friendly workplace, and developing our team members while teaching you the skills to lead you to career advancement opportunities. The IT Systems Administrator II will provide hands-on technical ownership of Identity and Access Management (IAM) and support infrastructure security controls across the enterprise. This role operates at the intersection of IT Infrastructure and Information Security, translating security requirements, audit findings, and risk management objectives into practical, operational IAM execution. This position will ensure IAM controls are designed, implemented, and sustained within real-world infrastructure and operational workflows.

Requirements

High School diploma or GED required
2–4 years of experience in Infrastructure, Security Engineering, or IAM-focused roles
Hands-on experience with Microsoft Active Directory and Microsoft Entra ID (Azure AD)
Understanding of Role-Based Access Control (RBAC) and least-privilege models
Ability to support security audits, vulnerability remediation, and compliance initiatives
Execute identity lifecycle management and access controls
Proven skills in scripting and automation (PowerShell, Bash, or similar)
Knowledge of Identity and Access Management (IAM) principles and best practices
Ability to handle documentation, process design, and standards development
Proficiency in administering Active Directory, Group Policy, and Entra ID
Knowledge of infrastructure security hardening and vulnerability management

Nice To Haves

Bachelor’s degree in IT or Computer Science preferred
Relevant identity, security, or Microsoft certifications preferred
Familiarity with Privileged Access Management (PAM) concepts
Familiarity with IAM governance tooling or access review platforms preferred
Ability to bridge operational IT and Information Security teams preferred
Familiarity working in regulated or audited environments is preferred

Responsibilities

Own day-to-day IAM execution, including user lifecycle management, role changes, terminations, service accounts, and privileged access
Design, document, and mature IAM processes, standards, and workflows across Infrastructure and Security teams
Implement and maintain least-privilege access models and role-based access control (RBAC)
Serve as primary technical owner for enterprise identity platforms, including Microsoft Entra ID (Azure AD) and Active Directory
Manage and enforce multi-factor authentication (MFA) and conditional access controls
Coordinate and execute infrastructure security hardening in partnership with Infrastructure and Information Security teams
Translate audit findings, risk assessments, and security requirements into actionable technical remediation
Support vulnerability remediation efforts tied to identity, access, and infrastructure controls
Monitor IAM-related risks and proactively identify gaps or improvement opportunities
Develop automation and scripting (e.g., PowerShell) to reduce manual IAM and security tasks
Improve consistency and reliability across identity lifecycle workflows
Support integration of identity controls across infrastructure, applications, and third-party platforms
Support audit evidence collection related to identity, access, and infrastructure security controls
Maintain clear documentation, standards, and procedural artifacts supporting IAM operations
Collaborate with Infrastructure, Application, and Security teams to align security controls with operational realities