System Administrator III

Endava•Colorado, CO

6h•Hybrid

About The Position

The Tier 3 Microsoft Entra Administrator is a senior Identity & Access Management (IAM) professional responsible for securing, managing, and optimizing hybrid identity environments across Active Directory and Microsoft Entra ID. Serving as the highest escalation point for identity-related issues, this role leads advanced troubleshooting, root cause analysis, identity governance, and security initiatives aligned with Zero Trust principles. This position focuses heavily on identity security, privileged access management, Conditional Access, MFA, Identity Protection, and identity governance. The administrator partners closely with Cybersecurity, Infrastructure, Compliance, and Operations teams to ensure secure, resilient, and audit-ready identity services. Responsibilities also include mentoring Tier 1–2 support teams, driving automation through PowerShell and Microsoft Graph, and improving operational efficiency through ServiceNow and identity lifecycle management tools such as NetIQ.

Requirements

5+ years of IAM experience, with 3+ years focused on Microsoft Entra ID in a hybrid environment.
Deep expertise in: Microsoft Entra ID and Active Directory
Deep expertise in: Conditional Access, MFA, and Zero Trust identity controls
Deep expertise in: Privileged Identity Management (PIM)
Deep expertise in: Hybrid identity troubleshooting (sync, authentication, federation)
Hands-on experience with ServiceNow (ITSM, identity workflows).
Experience working with NetIQ identity governance or directory tools.
Strong PowerShell and automation skills.
Proven ability to lead incident response and security-focused identity initiatives.
Security-first mindset with strong Zero Trust principles
Advanced troubleshooting and analytical skills
Strong collaboration with Security, Compliance, and Infrastructure teams
Clear technical documentation and communication
Ability to lead initiatives independently and influence identity strategy

Nice To Haves

Microsoft certifications (preferred): SC-300 – Identity and Access Administrator
Microsoft certifications (preferred): SC-200 / SC-100 – Security
Microsoft certifications (preferred): AZ-104, MS-102
Experience with: Entra ID Protection and identity risk management
Experience with: Defender for Cloud Apps integration
Experience with: Phishing-resistant MFA rollouts (FIDO2 / WHfB)
Experience with: ITIL-based operational environments
Experience supporting regulated or highly audited environments.

Responsibilities

Serve as the Tier 3 escalation point for complex Entra ID, Active Directory, authentication, and hybrid identity issues.
Lead resolution of critical identity outages, security incidents, and root cause analyses.
Administer and secure Microsoft Entra ID, Active Directory, Entra Connect, and Cloud Sync environments.
Design and manage Conditional Access, MFA, Identity Protection, Privileged Identity Management (PIM), and Zero Trust controls.
Lead identity governance initiatives, including Access Reviews, Entitlement Management, and joiner-mover-leaver processes.
Integrate and secure enterprise applications using SAML, OAuth, OpenID Connect, SCIM, and Entra SSO.
Drive automation and operational improvements using PowerShell, Microsoft Graph, Azure Automation, and Logic Apps.
Support audit, compliance, and regulatory requirements including SOX, SOC 2, ISO, and HIPAA.
Mentor support teams and contribute to service excellence through ServiceNow, documentation, and process improvements.