Information Technology - Azure Identity & Access Management Analyst 130-2068

Support the administration, security, and continuous improvement of our Microsoft identity environment. Manage user access, authentication controls, enterprise applications, role-based access, and identity governance processes that protect systems supporting healthcare operations and sensitive information, including electronic protected health information.

Responsibilities

• Administer Microsoft Entra ID and Active Directory Domain Services users, groups, administrative roles, authentication methods, and access assignments in accordance with least-privilege principles.
• Support Conditional Access policies, multi-factor authentication, passwordless authentication, self-service password reset, and secure sign-in practices.
• Assist with role-based access control, privileged access reviews, and access request workflows for subscriptions, resource groups, enterprise applications, and related services.
• Perform identity lifecycle administration, including onboarding, role changes, transfers, terminations, group membership updates, and periodic access certification activities.
• Support enterprise application registrations, single sign-on configurations, managed identities, service principals, and certificate or secret lifecycle tracking.
• Monitor identity-related alerts, audit logs, risky sign-ins, access anomalies, and security recommendations; escalate issues as appropriate.
• Partner with infrastructure, security, application, service desk, compliance, and business teams to resolve access issues and improve identity governance processes.
• Maintain documentation for access procedures, identity controls, administrative processes, and compliance evidence.
• Support HIPAA, HITRUST, SOC 2, and internal security control activities related to access management, audit logging, authentication, and privileged access.
• Participate in incident response, service restoration, root-cause analysis, and continuous improvement efforts related to identity and access management.
• Assist with implementation of Zero Trust security practices, including identity-first access, least privilege, secure administration, monitoring, and periodic access review.
• Perform other job-related duties as required or assigned.

Requirements

• Associate degree in information technology, computer science, cybersecurity, business information systems, or a related field is required; bachelor’s degree preferred.
• Minimum of 2 years of relevant hands-on experience supporting identity administration, access management, Azure administration, cloud services, security operations, or enterprise IT support.
• Experience working in a hybrid identity environment with Microsoft Entra Domain Services and Active Directory Domain Services.
• Experience with Microsoft Entra ID Governance, Privileged Identity Management, Azure Monitor, Log Analytics, Microsoft Defender for Cloud, or Microsoft Sentinel preferred.
• Experience supporting HIPAA, SOC 2, NIST, or other security and compliance frameworks preferred.
• Experience supporting SaaS integrations, application access reviews, service principals, managed identities, and certificate or secret management processes preferred.
• Healthcare, financial services, or other regulated industry experience preferred.
• Microsoft certification such as Identity and Access Administrator Associate or Azure Administrator Associate preferred.
• Successful completion of Health Care Sanctions background check.

Qualifications

• Knowledge in Conditional Access, multi-factor authentication, single sign-on, enterprise applications, access reviews, and privileged access concepts.
• Understanding of least privilege, segregation of duties, Zero Trust principles, audit logging, and secure administrative practices.
• Ability to troubleshoot access issues, document findings, follow established procedures, and communicate clearly with technical and non-technical stakeholders.
• Strong attention to detail and commitment to protecting sensitive healthcare information.
• Familiarity with PowerShell, Azure CLI, and other scripting tools preferred.
• Working knowledge of Microsoft Entra ID, Active Directory Domain Services, Azure RBAC, user and group administration, authentication methods, and access lifecycle processes preferred.
• Professional, service-oriented approach to supporting internal customers and business partners preferred.
• Ability to manage multiple priorities, follow change control processes, and maintain confidentiality preferred.
• Strong analytical thinking, problem-solving skills, and willingness to learn new Microsoft cloud identity technologies preferred.