Systems Administrator - M365 & Identity

BLUE ORIGIN•Seattle, WA

7d•$112,059 - $156,883

About The Position

This role is part of Blue Origin’s Enterprise Technology organization, which develops the digital infrastructure needed to advance the company’s mission. The Systems Administrator III will support and evolve enterprise identity, access, collaboration, and data protection platforms in a regulated, high-security environment. The role administers core Microsoft 365 and identity services, governs access, and builds automation to improve security, efficiency, and user experience. It spans Microsoft 365 productivity and security tools, enterprise identity and access management systems, and orchestration tools, with AI used to develop smarter, more scalable solutions. The administrator works across identity and collaboration services for a globally distributed workforce, including international sites, subsidiaries, partners, and external users. The role also collaborates with Security, GRC, HR systems, Infrastructure, and Engineering teams on compliance, audit evidence, access controls, and system improvements. Applicants must meet the stated U.S. citizenship, nationality, permanent-resident, refugee, or asylum eligibility requirements. A standard Blue Origin background check is required; additional checks may apply to certain job profiles.

Requirements

At least 5 years of experience administering enterprise identity, directory, or Microsoft 365 environments, including Entra ID and Active Directory.
Strong understanding of identity lifecycle management, MFA/Conditional Access, and privileged access management.
Experience with enterprise IAM platforms such as Okta or an identity governance tool.
Proficiency with scripting, API integration, and workflow/orchestration tools.
Experience building or improving solutions using AI-driven automation or intelligent workflows.
Ability to diagnose complex issues, operate independently, and take ownership of assigned systems.
Strong communication, documentation, and cross-team collaboration skills.

Nice To Haves

Experience with data governance or protection tooling, including sensitivity labeling, DLP, or data access governance.
Experience with access certification, role-based access design, or audit evidence collection.
Experience with backup and recovery of directory or SaaS platforms.
Familiarity with Zero Trust models and regulated environments such as ITAR, export control, CMMC, or ISO 27001.
Experience with Git-based workflows or Infrastructure-as-Code practices.
Experience with external identity, B2B collaboration, or partner access models, particularly in multinational or cross-border environments.
Experience supporting international users or sites, including data residency, privacy such as GDPR, or sovereignty requirements.

Responsibilities

Administer and maintain Microsoft 365 services, including Exchange Online, SharePoint, Teams, OneDrive, and security and compliance tools such as Defender, Purview, and Sentinel integrations.
Manage identity lifecycle, authentication, and access across cloud and hybrid identity systems, including SSO/federation, MFA, Conditional Access, directory services, and privileged access.
Support identity governance processes, including access requests, role-based and birthright access, access reviews and certification campaigns, and joiner/mover/leaver automation.
Support data protection and information governance, including sensitivity labeling and classification, permission remediation, data access governance, and collaboration-space lifecycle management.
Support credential and secrets management platforms, including enterprise password managers, privileged access tools, and secrets vaults.
Support resilience of identity and collaboration platforms, including backup, recovery, and disaster-recovery testing.
Support email and collaboration security, including mail flow, filtering, and secure submission and relay practices.
Support secure external and international collaboration, including partner, guest, and non-U.S.-person identity, cross-tenant access, and approval workflows that address export-control, data-residency, and sovereignty requirements.
Design and operate access controls that account for person-based and geographic restrictions, including location-based Conditional Access, program-scoped access for non-U.S. persons, phishing-resistant MFA for sensitive access, and time-bound access with expiration.
Support identity and collaboration workflows for international sites, subsidiaries, and partners, including onboarding and offboarding across time zones.
Build automation and integrations using scripting such as PowerShell, APIs such as Microsoft Graph, and orchestration and workflow tools such as Tines or Okta Workflows; apply configuration-as-code practices where appropriate.
Develop and apply AI-driven automation to improve reliability, reduce operational toil, and streamline identity and access processes.
Troubleshoot and resolve tier-3 issues across identity, authentication, and collaboration platforms.
Monitor platform health, proactively address performance and security concerns, and drive long-term improvements.
Collaborate with Security, GRC, HR systems, Infrastructure, and Engineering teams on compliance requirements, audit evidence, access controls, and system enhancements.
Maintain accurate documentation, runbooks, diagrams, and operational standards.

Benefits

Medical insurance
Dental insurance
Vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with company match of up to 5%
Education Support Program
Stock options for regular employees working at least 20 hours per week
Paid time off of up to four weeks per year, based on weekly scheduled hours
Up to 14 company-paid holidays
Depending on role type and job level, potential eligibility for benefits and bonuses based on individual contributions, company results, or other factors; amounts and eligibility are not guaranteed and may change or be canceled