{"id":3585739,"url":"https://alion.io/job/blue-origin-systems-administrator-m365-identity","title":"Systems Administrator - M365 & Identity","company":{"id":3698,"name":"Blue Origin","domain":"blueorigin.com","url":"https://alion.io/company/blueorigin","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":244,"ghost_share":0,"stale_share":0.373,"repost_share":0.004,"time_to_fill_p50_days":45,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":112059,"max":156882,"currency":"USD","period":"year","gross":null,"usd_annual":156882},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"Tines","optional":false},{"name":"CMMC","optional":true},{"name":"DLP","optional":true},{"name":"GDPR","optional":true},{"name":"Git","optional":true},{"name":"ISO 27001","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T17:44:29Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Application close date:\nApplications will be accepted on an ongoing basis until the requisition is closed.At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!\nThis role is part of Enterprise Technology (ET), where we’re developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin’s mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies.We are seeking an experienced Systems Administrator III to support and evolve our enterprise identity, access, collaboration, and data protection platforms. In this role, you will administer core Microsoft 365 and identity services, help govern who has access to what, and build automation that improves security, efficiency, and user experience. You will work across a broad platform portfolio, including the Microsoft 365 productivity and security suite, enterprise identity and access management systems, and the orchestration tools that connect them, and you will use AI to build smarter, more scalable solutions. This is a high-impact role for someone who enjoys technical ownership, problem-solving, and continuous improvement in a regulated, high-security environment.\nResponsibilities include but are not limited to:\nAdminister and maintain Microsoft 365 services, including Exchange Online, SharePoint, Teams, OneDrive, and the security and compliance stack (such as Defender, Purview, and Sentinel integrations).\nManage identity lifecycle, authentication, and access across cloud and hybrid identity systems, including SSO/federation, MFA, Conditional Access, directory services, and privileged access.\nSupport identity governance processes, including access requests, role-based and birthright access, access reviews and certification campaigns, and joiner/mover/leaver automation.\nSupport data protection and information governance, including sensitivity labeling and classification, permission remediation, data access governance, and collaboration-space lifecycle management.\nSupport credential and secrets management platforms, such as enterprise password managers, privileged access tools, and secrets vaults.\nSupport resilience of identity and collaboration platforms, including backup, recovery, and disaster-recovery testing.\nSupport email and collaboration security, including mail flow, filtering, and secure submission and relay practices.\nSupport secure external and international collaboration, including partner, guest, and non-US-person identity, cross-tenant access, and approval workflows that account for export-control, data-residency, and sovereignty requirements.\nDesign and operate access controls that account for person-based and geographic restrictions, such as Conditional Access with location-based policies, program-scoped access for non-US persons, phishing-resistant MFA for sensitive access, and time-bound access with expiration.\nSupport identity and collaboration workflows for international sites, subsidiaries, and partners, including onboarding and offboarding for a globally distributed workforce across time zones.\nBuild automation and integrations using scripting (such as PowerShell), APIs (such as Microsoft Graph), and orchestration and workflow tools (such as Tines or Okta Workflows), and apply configuration-as-code practices where they fit.\nDevelop and apply AI-driven automation to improve reliability, reduce operational toil, and streamline identity and access processes.\nTroubleshoot and resolve tier-3 issues across identity, authentication, and collaboration platforms.\nMonitor platform health, proactively address performance and security concerns, and drive long-term improvements.\nCollaborate with Security, GRC, HR systems, Infrastructure, and Engineering teams to support compliance requirements, audit evidence, access controls, and system enhancements.\nMaintain accurate documentation, runbooks, diagrams, and operational standards.\nMinimum Qualifications:\n5+ years of experience administering enterprise identity, directory, or Microsoft 365 environments, including Entra ID and Active Directory.\nStrong understanding of identity lifecycle management, MFA/Conditional Access, and privileged access management.\nExperience with enterprise IAM platforms (such as Okta or an identity governance tool).\nProficiency with scripting, API integration, and workflow/orchestration tools.\nExperience building or improving solutions using AI-driven automation or intelligent workflows.\nAbility to diagnose complex issues, operate independently, and take ownership of assigned systems.\nStrong communication, documentation, and cross-team collaboration skills.\nPreferred Qualifications:\nExperience with data governance or protection tooling, including sensitivity labeling, DLP, or data access governance.\nExperience with access certification, role-based access design, or audit evidence collection.\nExperience with backup and recovery of directory or SaaS platforms.\nFamiliarity with Zero Trust models and regulated environments (such as ITAR, export control, CMMC, or ISO 27001).\nExperience with Git-based workflows or Infrastructure-as-Code practices.\nExperience with external identity, B2B collaboration, or partner access models, particularly in multinational or cross-border environments.\nExperience supporting international users or sites, including data residency, privacy (such as GDPR), or sovereignty requirements.\nBase Pay Range for:\nWA applicants is $112,059.00 - $156,882.60Other site ranges may differ\nCulture Statement\nDon’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.\nExport Control Regulations\nApplicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.\nBackground Check\nRequired for all positions: Blue’s Standard Background Check\nRequired for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation\nRequired for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.\nRequired for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical\nBenefits\nBenefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.\nStock Options for all regular employees (working at least 20 hours/week)\nPaid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.\nDependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details. \nEqual Employment Opportunity\nBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws. For more information on “Know Your Rights,” please see here.\nAffirmative Action and Disability Accommodation\nApplicants wishing to receive information on Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at . Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.","description_format":"text","description_chars":10154,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Launch Services","Space Services"],"lifecycle":[{"event":"open","at":"2026-11-01T10:32:10Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":45,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":156882,"is_top_pay":true},"html_url":"https://alion.io/job/blue-origin-systems-administrator-m365-identity","json_url":"https://alion.io/job/blue-origin-systems-administrator-m365-identity.json","meta":{"generated_at":"2026-11-03T20:47:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3545,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3698},"rest":"https://alion.io/mcp/rest/get_company?id=3698"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblue-origin-systems-administrator-m365-identity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblue-origin-systems-administrator-m365-identity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblue-origin-systems-administrator-m365-identity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blue-origin-systems-administrator-m365-identity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblue-origin-systems-administrator-m365-identity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3585739}},{"tool":"search_jobs","arguments":{"company":"blueorigin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3585739},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}