Technology Support Analyst – Identity Management

SWCA Environmental Consultants•, CO

3d•$83,735 - $109,680•Hybrid

About The Position

SWCA Environmental Consultants seeks a Technology Support Analyst – Identity Management to support its growing Technology Team. The role administers and governs user identities, access rights, authentication services, and employee technology lifecycle processes across the organization. It partners with Human Resources, Information Security, Technology Operations, and business leaders to provide secure, timely, and appropriate access to technology resources throughout employees’ time with the company. Key areas include user provisioning and deprovisioning, role-based access administration, Microsoft Entra ID, SSO, MFA, enterprise application access management, and identity governance. The position requires attention to detail, a security-first mindset, strong customer service, and the ability to manage a high volume of requests while balancing security, compliance, and operational efficiency. This is a full-time, regular salaried/exempt position with benefits. It is based in SWCA’s Broomfield, Colorado office, with hybrid or distributed (remote) work options. Applications are reviewed on a rolling basis, and the position may close once a strong candidate pool is established. SWCA Environmental Consultants is a 100% employee-owned environmental consulting firm providing environmental services across the United States. Its stated aim is to be a great place to work and a leader in sustainability, delivering science-based and creative solutions to environmental challenges. The company describes its work environment as collaborative and team-focused, with opportunities to build meaningful, long-term careers.

Requirements

Associate’s degree or equivalent from a two-year college or technical school.
Three years of relevant industry experience, including identity and access management, account administration, employee onboarding/offboarding workflows, and/or enterprise application administration.
Experience working in a customer-focused technology services environment.
Experience administering Microsoft 365 and Microsoft Entra ID.
Working knowledge of identity and access management concepts and practices, including RBAC, least-privilege access, and access governance.
Experience supporting SSO, MFA, Conditional Access, and user authentication technologies.
Experience administering SaaS applications and user permissions.
Understanding of information security principles and compliance requirements.
Strong analytical and troubleshooting skills.
Exceptional attention to detail and accuracy.
Ability to manage sensitive and confidential information.
Strong organizational and time-management skills.
Excellent verbal and written communication abilities.
Demonstrated commitment to customer service and continuous improvement.
Ability to work independently and collaboratively across teams.
When driving is required, a valid driver’s license and compliance with SWCA’s driver requirements are required.
If travel is required, ability to obtain and maintain valid travel documents and identification for work-related domestic travel.

Nice To Haves

Bachelor’s degree in a relevant field.
Five years of relevant industry experience.
A+, Cloud+, and ITIL Foundations certifications.
Microsoft Fundamentals or related Microsoft certifications.
Basic PowerShell scripting and automation experience.
Familiarity with Microsoft Intune MDM and IT service management systems such as Freshservice.

Responsibilities

Provide advanced tier-one and tier-two troubleshooting and support for hardware, software, and network issues.
Deliver deskside and remote technical assistance to employees.
Escalate complex or unresolved issues, document actions, and follow through until resolution.
Install, configure, and upgrade workstations, peripherals, and authorized software according to company standards and security policies.
Conduct user training and onboarding sessions on technology, security practices, and system capabilities.
Monitor service desk queues, prioritize support requests, and meet service-level agreements.
Maintain records of support activities, asset inventories, and system configurations using organizational tracking tools.
Assist with software updates, patch management, system backups, and other routine maintenance.
Collaborate with cross-functional teams to identify recurring issues and recommend process and support improvements.
Communicate technical concepts clearly and professionally to non-technical users.
Follow applicable federal, Tribal, state, local, industry, contractual, and company regulations, standards, and specifications.
Perform related work as assigned.
Coordinate identity and access activities for employee onboarding, transfers, promotions, organizational changes, and offboarding; provision, modify, or remove access according to approved requirements.
Administer user accounts, security groups, distribution lists, shared mailboxes, and enterprise application access.
Administer Microsoft Entra ID and support SSO, MFA, Conditional Access, passwordless authentication, and related identity security controls.
Configure and maintain enterprise application integrations and authentication methods.
Support RBAC, least-privilege access, identity governance, and privileged access management initiatives.
Validate access requests against documented business justifications, approval workflows, and security requirements.
Conduct periodic access reviews and support audits, compliance reviews, and security assessments.
Identify unauthorized or excessive permissions and coordinate remediation.
Produce metrics related to employee onboarding, account provisioning, access administration, and identity governance.