Systems Administrator

AeroVironment•Albuquerque, NM

11d•$91,000 - $138,750

About The Position

AeroVironment is seeking an experienced Identity and Systems Administrator / Analyst to support identity and access management, Windows infrastructure, endpoint management, and general systems administration. The role primarily focuses on maintaining and improving identity and access controls, administering Okta, supporting role-based access control, and assisting with Active Directory and Windows Server environments. The environment is primarily Windows-based, with a smaller number of macOS and Linux systems. The position supports and troubleshoots identity systems and access controls surrounding automated user onboarding and offboarding processes; routine account provisioning and deprovisioning are already automated. The administrator will work with IT, security, application owners, and other technical teams to resolve issues and improve services, while supporting security, compliance, and audit activities.

Requirements

Five or more years of relevant experience in identity management, systems administration, IT operations, or a related field.
Strong understanding of identity and access management principles.
Experience administering Okta or a comparable identity management platform.
Understanding of role-based access control, least privilege, group-based access, and access governance concepts.
Experience supporting single sign-on and multifactor authentication.
Experience troubleshooting identity synchronization, authentication, authorization, or application access issues.
Experience with Microsoft Active Directory administration.
Working knowledge of Windows Server environments.
Experience managing file-sharing systems, folder permissions, and security groups.
Familiarity with Windows endpoint administration and support.
Experience using an IT service management or ticketing system.
Ability to troubleshoot technical issues and communicate findings clearly.
Strong technical writing skills and ability to create clear, accurate documentation.
Ability to work independently while collaborating effectively with technical and nontechnical teams.
Strong attention to detail, organization, and follow-through.
Applicants must qualify as a U.S. person under ITAR/EAR or be eligible for an export license; U.S. citizenship is required for this position.

Nice To Haves

A degree in information technology, computer science, cybersecurity, or a related field; relevant professional experience may substitute for formal education.
Industry certifications, such as Okta, Microsoft, CompTIA, Jamf, Linux, cybersecurity, or systems administration credentials.
Experience with Okta application integrations, Universal Directory, Lifecycle Management, Workflows, or access policies.
Familiarity with Jamf or another Apple device-management platform.
Experience supporting macOS endpoints in an enterprise environment.
Basic familiarity with Linux administration or Linux-based systems.
Experience supporting hybrid identity environments.
Knowledge of Microsoft Entra ID, Microsoft 365, or similar cloud services.
Familiarity with PowerShell or other scripting and automation tools.
Experience supporting automated identity lifecycle or provisioning workflows.
Understanding of security frameworks, access reviews, audit requirements, and privileged access management.
Experience working in a regulated, compliance-focused, or security-conscious environment.
Strong analytical and problem-solving skills.
Ability to balance security requirements with business and operational needs.
Willingness to learn new platforms and technologies.
Ability to manage multiple assignments and priorities.
Customer-service-oriented approach to technical support.
Strong written and verbal communication skills.
Commitment to maintaining confidentiality and protecting sensitive information.
Ability to identify opportunities for automation, standardization, and process improvement.

Responsibilities

Administer and support identity and access management solutions, including Okta.
Maintain application assignments, access policies, groups, roles, and authentication requirements.
Configure and support role-based access control based on job responsibilities, business requirements, and least-privilege principles.
Support single sign-on, multifactor authentication, federation, and application integrations.
Troubleshoot authentication, authorization, account synchronization, application access, and provisioning-related issues.
Monitor and support automated identity lifecycle processes, identifying and resolving workflow, synchronization, or access assignment failures.
Review identity and access configurations for consistency, security, and compliance.
Participate in periodic access reviews, entitlement reviews, and audit activities.
Work with internal teams to identify access requirements and translate them into appropriate roles, groups, and permissions.
Assist with administration and maintenance of Active Directory, including users, groups, organizational units, delegation, permissions, and Group Policy.
Support Windows Server environments and related infrastructure services.
Administer and troubleshoot file-sharing systems, shared folders, access permissions, and security groups.
Support a primarily Windows-based endpoint environment, with limited macOS and Linux systems.
Assist with macOS endpoint management through Jamf when needed.
Use ticketing systems to document, track, prioritize, and resolve incidents, requests, and problems.
Create and maintain technical documentation, standard operating procedures, troubleshooting guides, system diagrams, and configuration records.
Assist with system upgrades, application integrations, testing, automation, and process improvements.
Support security, compliance, and audit activities related to identity, access, endpoints, and systems administration.
Collaborate with IT, security, application owners, and other technical teams to resolve issues and improve services.