Systems Engineer – Identity & Access Management (IAM)

SPHERE Technology Solutions•, (Multiple States)

43d

About The Position

The Systems Engineer – Identity & Access Management (IAM) is a hands-on, customer-facing role responsible for deploying, integrating, supporting, and improving identity-focused infrastructure and SPHEREboard solutions. The engineer combines strong systems-administration fundamentals with identity, data, automation, and interpersonal skills to resolve complex issues and deliver reliable customer outcomes. This role is well suited to a systems administrator or infrastructure engineer who has owned Active Directory, authentication services, Windows or Linux platforms, scripting, and production troubleshooting—and who wants to build deeper expertise across IAM and identity security.

Requirements

3–5+ years of hands-on experience in systems administration, systems engineering, infrastructure engineering, IAM engineering, or a closely related role.
Strong administration and troubleshooting experience with Windows Server and Active Directory; working knowledge of Linux/Unix administration.
Practical understanding of DNS, TCP/IP, firewalls, ports, proxies, certificates, service accounts, permissions, scheduled services, and remote connectivity.
Proficiency with PowerShell for administration and automation.
Working SQL skills, including joins, filtering, data validation, and troubleshooting; ability to grow into stored procedures, views, indexing, and performance analysis.
Experience supporting production applications or infrastructure and diagnosing multi-system issues from symptoms through root cause.
Familiarity with identity and authentication concepts such as directory services, group membership, role-based access, SSO, MFA, SAML, OAuth/OIDC, or Kerberos.
Demonstrated customer-facing experience; able to build rapport, listen carefully, explain technical findings, manage expectations, and remain professional under pressure.
A security-minded approach to privileged access, credentials, change control, data handling, and operational reliability.

Nice To Haves

Microsoft Entra ID, hybrid identity, Group Policy, federation, or enterprise SSO administration.
Microsoft SQL Server administration and advanced SQL development, including stored procedures, views, indexing, and query optimization.
IAM, IGA, or PAM platforms such as SailPoint, Okta, CyberArk, or comparable technologies.
Cloud platforms and identity services in Azure, AWS, or Google Cloud.
REST APIs, JSON, XML, Python, Bash, Git, or infrastructure-as-code practices.
Experience deploying enterprise software or delivering technical solutions in customer environments.
Relevant Microsoft, Linux, cloud, security, or identity certifications.

Responsibilities

Engineer and administer identity infrastructure. Configure, maintain, and troubleshoot Active Directory, Microsoft Entra ID, LDAP, authentication services, service accounts, certificates, DNS, and related Windows or Linux components.
Deploy and support SPHEREboard. Install and configure application, database, and scan-server components; enable connectors; validate services and access; establish schedules; and support operational handoff.
Integrate enterprise data sources. Connect directories, servers, databases, PAM platforms, HR sources, and other systems using native connectors, SQL, PowerShell, REST APIs, and structured data formats.
Automate repeatable work. Build and maintain PowerShell-based automation for data collection, transformation, validation, monitoring, and operational support.
Work confidently with data. Develop and troubleshoot SQL queries, views, stored procedures, and data mappings; reconcile source inventories and validate completeness and accuracy.
Troubleshoot end to end. Diagnose issues across identity, operating systems, networks, permissions, certificates, application services, databases, connectors, and source data.
Build trusted customer relationships. Demonstrate strong customer-facing skills by partnering with clients to understand business needs, translate technical concepts into clear communications, and deliver timely resolution of system administration requests.
Operationalize deployments. Create runbooks, configuration records, test evidence, support procedures, and training materials that enable reliable customer ownership.
Apply secure engineering practices. Use least privilege, controlled change, secure credential handling, logging, validation, and clear escalation paths throughout implementation and support.
Improve the product and practice. Partner with Engineering, Product, Support, and Services to identify defects, close documentation gaps, improve deployment patterns, and share field learning.