Systems Engineer Infrastructure

Tokio Marine HCC • Houston, TX

2d • Hybrid

About The Position

The Systems Engineer, Infrastructure serves as a technical lead and subject matter expert in designing, architecting, implementing, operating, and maintaining access management solutions using Entra ID, Active Directory, and Okta. The role includes managing Azure identity and infrastructure capabilities, supporting Active Directory environments, and designing and troubleshooting Okta application integrations. The position is based in Houston, Texas, with a hybrid schedule of four days onsite and one day remote, and occasional travel of up to 10% of the time.

Requirements

• Bachelor’s degree in Computer Science, a related field, or equivalent education and/or experience.
• At least 2 years of relevant and progressive professional experience.
• Expert knowledge of Azure Entra ID capabilities, including Conditional Access Policies, Privileged Identity Manager, and application registrations.
• Strong understanding of PIM and assigning roles and IAM permissions on management groups, subscriptions, and resources.
• Strong understanding of application registrations, enterprise applications, service principal names, managed identities, and least-privilege Microsoft Graph API permissions.
• Strong understanding of multifactor authentication, SSPR, and Windows Hello for Business.
• Strong PowerShell scripting, automation, and scheduling skills, including working with data in Azure.
• Good understanding of Intune policy management and Autopilot.
• Strong Active Directory background, including geographically distributed domains, numerous domain controllers and AD sites, and a user base of 5,000 or more.
• Strong understanding of DNS, Group Policy, user object and OU administration, Microsoft tiering, IAM, and PAM concepts.
• Strong knowledge of Windows Server operating systems from 2016 through 2025.
• Strong understanding of FSMO roles and delegation of permissions across the domain OU structure.
• Solid understanding of the steps needed to recover a domain after a disaster.
• Strong understanding of IAM concepts, including identity federation, SSO, SAML, OAuth, OIDC, MFA, RBAC, and least-privilege principles.
• Ability to support and troubleshoot technical issues in Okta application integrations.

Nice To Haves

• Knowledge of and experience with CyberArk.
• Knowledge of and experience with Rubrik.
• Microsoft, Azure, or Okta certification.

Responsibilities

• Design, architect, implement, operate, and maintain access management solutions using Entra ID, Active Directory, and Okta.
• Manage Azure infrastructure, including user accounts, groups, conditional access policies, Intune, mobile device management, and endpoint security.
• Apply least-privilege administration when allocating Microsoft Graph API permissions to application registrations, enterprise applications, service principals, and managed identities.
• Stay current on Entra ID features, best practices, and security trends, and recommend continuous improvements.
• Administer Active Directory domains, sites, domain controllers, DNS, Group Policy, user objects, organizational units, and delegated permissions.
• Support domain security and integrity, including FSMO roles and domain recovery in the event of a disaster.
• Provide Okta subject matter expertise on application integration, IAM functionality, and the Okta feature roadmap.
• Design and implement Okta platform configurations to align with solution architecture and customer requirements.
• Support customer application integrations into Okta-based IAM solutions and troubleshoot technical issues before, during, and after integration.

Benefits

• Competitive salary.
• Comprehensive medical, vision, and dental benefits, with eligibility beginning on the date of hire.
• Ongoing learning and development opportunities.
• Basic life and disability insurance.
• 401(k) plan with a 6% company match.
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off.
• Paid parental leave.
• Opportunity to do meaningful work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level