Senior Infrastructure Engineer - IAM & Automation

Polsinelli•Edwardsville, IL

1d•Hybrid

About The Position

Polsinelli, a national law firm headquartered in Kansas City, MO, is seeking a Senior Infrastructure Engineer. This role reports to the IT Infrastructure Experience Manager and can be performed hybrid or remotely, though candidates must be located near one of the firm's offices and be able to come in if needed. The position is responsible for the day-to-day administration, maintenance, support, and triage of Infrastructure escalations within the Platform Services function of IT. It requires demonstrated experience in Identity and Access Management platforms and workflows, PowerShell and MS Graph, and a strong customer service skillset. Primary responsibilities include working with Okta and M365 for Identity and Access Management, authoring and maintaining automation tasks via PowerShell and/or MS Graph, and supporting the administration and configuration of the M365 tenant.

Requirements

Advanced/Expert Level of PowerShell script building and automation, including Azure Automation runbooks and MS Graph.
5+ Years supporting Okta or other IAM platforms.
5+ Years supporting M365 Administration (Entra, Teams, OneDrive, Conditional Access).
Strong experience supporting onboarding, offboarding, and automated life-cycle management workflows driven by UKG or another HRIS.
Experience working with SQL databases and other structured data sources to support automation and identity workflows.
Experience supporting identity synchronization, attribute mappings, Microsoft Entra Connect, and AD extension attributes.
Experience with Netwrix Directory Manager or similar directory management platforms.
Proficiency in Active Directory/Entra, Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, privileged access management, Conditional Access, and automated life-cycle management.
Strong troubleshooting, documentation, communication, and customer service skills.

Responsibilities

Serve as the primary engineer and platform owner for the firm’s Identity & Access Management ecosystem, with emphasis on Okta, lifecycle workflows, and automation patterns.
Triage incidents and calls. Independently analyze, solve, and correct issues in real time, providing problem resolution end-to-end.
Manage and monitor Identity and Access controls through Okta and Entra/Active Directory.
Create, support, and maintain Okta configurations to support access to business applications, Single Sign-On, SAML, SCIM, Multi-Factor Authentication, and lifecycle management.
Create, support, and maintain the configuration and enforcement of policies and settings using Conditional Access, including phishing-resistant and device-aware authentication, biometrics, and managed-device enforcement for tier-1 applications.
Provide administration, technical support, and troubleshooting for application authentication, provisioning, lifecycle, and SSO setup requests or issues through Okta and M365.
Create, Support, and Maintain automation scripts, Azure Automation runbooks, Freshservice workflows, and related processes for employee onboarding and offboarding, group and account management, and OU/Active Directory processes.
Support onboarding, offboarding, and identity lifecycle workflows driven by UKG and other source systems, including integrations that pull and validate data from SQL databases and other structured data sources.
Manage and monitor identity synchronization between Active Directory and Microsoft Entra ID, including sync rules, attribute mappings, scoping filters, exception handling, and AD extension attributes.
Assist in the management of Active Directory and Entra ID.
Support and maintain Netwrix Directory Manager and related technology platforms to enforce PAM and least privilege access.
Support and maintain Microsoft Entra Privileged Identity Management (PIM), including role assignments, activation settings, approval workflows, and privileged access controls.
Create, Support, and Maintain Microsoft Entra app registrations, enterprise applications, service principals, API permissions, client secret and certificate renewals, and related access controls.
Establish and maintain standards for automation, scripting, documentation, reporting, monitoring, and change management within IAM and Automation.
Collaborate closely with HR, Recruiting, Security, Infrastructure, User Support, application owners, and business partners, including Facilities, to support and improve identity and access workflows.
Design and maintain end-to-end identity lifecycle processes (joiner, mover, leaver) across UKG/HRIS, Active Directory, Okta, M365, and key business applications.
Provide day-to-day technical guidance and support for IAM and Automation processes.
Ensure that systems related documentation is maintained and kept up to date.
Provide 24 x 7 support for critical production systems.
Other duties as assigned.