{"id":3812733,"url":"https://alion.io/job/brg-administrator-systems","title":"Administrator, Systems","company":{"id":1803497,"name":"BRG","domain":"thinkbrg.com","url":"https://alion.io/company/thinkbrg","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":12,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-07T05:47:08Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Zero Trust","optional":false},{"name":"DNS","optional":true},{"name":"ITIL","optional":true},{"name":"Microsoft Office","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-11-05T15:10:17Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T03:12:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We Do Consulting Differently\nSecond Sight Solutions, a subsidiary of Berkeley Research Group (BRG), is a health technology company, and our innovative technology reimagines how drug discount data is exchanged, establishing new connections and improving transparency for drug manufacturers and their customers. Our customers and partners trust us to deliver reliable, first-to-market solutions and safeguard the data we receive. We trust our employees, and our culture gives them the freedom to create, collaborate, and grow. Our leaders are industry experts, creative, unafraid to challenge the status quo, and the pioneers of market-changing solutions.\nThe Systems Administrator (IAM Engineer) position is a critical role within the Second Sight IT organization and an invaluable resource for Second Sight professionals. This position owns the lifecycle, security, and governance of user identities and access across Second Sight’s Microsoft Entra ID-centered environment, ensuring that the right people have the right access to the right systems at the right time. The right candidate is a highly motivated problem solver who pairs deep identity and access management (IAM) expertise with above average white glove customer service, and who will work closely with the Security Team and the IT Services team to support our customer base (aka Second Sight) in a Mac and Cloud Service supported environment.\nKey Responsibilities:\nIdentity Lifecycle Management\nOwn the end-to-end joiner, mover, and leaver process for employees and contractors in Microsoft Entra ID, including account provisioning, role and group changes, and timely revocation of access at offboarding.\nAdminister Microsoft Entra ID users, security, and Microsoft 365 groups (including dynamic groups), guest (B2B) accounts, and device registrations, as well as maintain standards for naming, attributes, and group-based licensing.\nManage user access across the software systems used within Second Sight, including onboarding applications to single sign-on (SAML/OIDC), configuring enterprise applications and app registrations, and automated user provisioning (SCIM) where supported.\nCoordinate with Governance, Risk and Compliance (GRC), HR, department managers, and application owners to define role-based access models and approve, fulfill, and document access requests.\nAuthentication and Access Control\nDesign, implement, and maintain Conditional Access policies, including device compliance, location, and risk-based controls, using documented testing and change management.\nManage multi-factor and passwordless authentication (e.g., Microsoft Authenticator, FIDO2 security keys, passkeys, Temporary Access Pass), self-service password reset, and authentication method policies.\nAdminister privileged access using least-privilege, role-based access control, including Privileged Identity Management (PIM) just-in-time elevation, separate administrative accounts, and emergency (break-glass) account procedures.\nMonitor sign-in and audit logs and identity risk signals (e.g., risky sign-ins and users) and, with the Security Operations Team, investigate and remediate suspicious activity and identity-related security findings.\nAccess Governance, Audit, and Compliance\nPlan and perform periodic access reviews and recertifications for users, groups, applications, and privileged roles; follow up on remediation and retain evidence for auditors.\nPerform regular audits to ensure compliance with IT and access policies, identify excessive or orphaned access and stale accounts, and identify potential security risks.\nSupport internal and external audits and client security assessments by providing identity and access evidence, documentation, and reporting.\nDevelop and maintain IAM standards, procedures, runbooks, and metrics; develop and deliver employee training on secure authentication and access practices.\nAutomation and Integration\nAutomate identity lifecycle, reporting, and routine administration tasks using PowerShell, Microsoft Graph, Entra lifecycle workflows, and similar tools.\nIntegrate Entra ID with HR sources, Help Desk, and ticketing software (e.g., Jira), endpoint management (Jamf, Intune), and SaaS applications to streamline access requests and approvals.\nResearch and evaluate new identity, authentication, and access governance capabilities and recommend improvements.\nEndpoint and Systems Support\nManage endpoints (MacBooks) that are returned to the DC office as part of the off-boarding process. This will include inventorying and preparing for shipment to other endpoint specialists.\nAssist with the onboarding and offboarding process for MacOS users, including setting up new devices and revoking access when necessary.\nProvide Tier 2/3 support for identity and access incidents, such as account lockouts, MFA enrollment and recovery, and application access issues.\nSupport Mac devices in coordination with identity controls, including device compliance, FileVault, and Jamf/Intune integration with Entra ID Conditional Access and single sign-on for macOS users.\nThe following items are as time is available:Deploy, maintain, and troubleshoot MacBooks and mobile devices (iOS, tablets, and smartphones), both remotely and onsite; manage standardized workstation software configurations and updates and patches for MacOS and installed software with minimal disruption to end users.\nTroubleshoot general MacOS issues and interactions with Microsoft 365, centralized management software (e.g., Jamf, FileVault), and endpoint security software (e.g., Defender); help Second Sight team members with questions regarding commercial off the shelf (COTS) software applications (Office 365 tools, Adobe, Intune, etc.).\n\nCollaboration and Projects\nWork as part of a team, sharing duties with other IT personnel throughout Second Sight Solutions, and coordinate project actions with the IT Services Manager, System Administrators, vendors and technical representatives, and internal and external clients.\nCoordinate IT project teams, and schedule and organize upgrades, migrations, and maintenance.\nAdditional tasks may be required as directed by the IT Services Manager.\nQualifications :\nMinimum 3-4 years of IT experience working in a similar capacity, including at least 2-3 years of hands-on identity and access management experience in a Microsoft Entra ID and Microsoft 365 environment.\nStrong hands-on experience administering Microsoft Entra ID, including Conditional Access, MFA and passwordless authentication, enterprise applications and app registrations, single sign-on, group-based licensing, Privileged Identity Management, and access reviews.\nSolid understanding of IAM concepts and principles, including least privilege, role-based access control, segregation of duties, joiner/mover/leaver lifecycle management, Zero Trust, and authentication and federation standards (SAML, OAuth 2.0, OpenID Connect, SCIM).\nProficiency with PowerShell and the Microsoft Graph API (or comparable scripting) to automate identity administration, reporting, and auditing tasks.\nExperience supporting access reviews, audits, and compliance or client security assessments, with the ability to produce clear evidence and documentation.\nThe candidate should have hands-on experience with device management software such as Microsoft Intune (required) and Jamf (nice to have). They should be able to deploy, configure, and manage Apple devices and BYOD phones at scale, and understand IT security principles, privacy practices, and how they apply to Apple environments, with familiarity with encryption, multi-factor authentication, and secure device management.\nIT Service Management ticketing experience (e.g., Jira).\nStrong knowledge of technology, hardware and software in a professional services environment (e.g., working knowledge of MacOS, desktop and network security issues, software functionality and deployment, in addition to Microsoft Office 365).\nVIP customer satisfaction focus. Great customer service and interpersonal skills. Excellent and effective communication skills, including speaking, writing and active listening. Must have a positive, professional attitude, and the integrity and discretion to handle privileged access and sensitive personal and client data.\nAbility to solve complex problems by gathering facts and applying detailed troubleshooting techniques. This position requires keen attention to detail and excellent critical thinking skills.\nGood organization, time management and prioritization. Ability to multitask and prioritize workload along with project assignments.\nExperience in managing IT projects, including rollouts of new hardware and software, system upgrades, and migrations.\nGeneral working knowledge of basic networking (TCP/IP, DNS, Routing, Sub-netting), anti-virus, backup, and remote access technologies.\nPosition will be based in Washington DC, but IT personnel are required to support clients in all Second Sight locations globally, including personnel and independent contractors working remotely. Partial remote work will be supported, but in office participation will be expected at least 3 days per week.\nIT personnel may be required to travel for short periods of time. Trips will sometimes extend to 5 working days and could on rare occasions extend beyond 5 business days. All travel expenses will be reimbursed.\nOn-call and overtime will be required with this position.\nCore Support hours for all Second Sight offices are from 8:00am-8:00pm local. This shift will be between those hours. Coverage over this time will be supported by the entire team in tandem to ensure best support available.\nThis description indicates the general level and nature of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.\nPreferred:\nMicrosoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent Microsoft security certification.\nCompTIA Security+ or similar security certification.\nApple Certified Support Professional (ACSP), Apple Certified Mac Technician (ACMT), or similar credentials that validate expertise in Apple technologies is desirable.\nITIL 4 Foundation certification\nCompTIA A+ certification\nCandidate must be able to submit verification of his/her legal right to work in the United States, without company sponsorship.\nHybrid role out of our Washington, DC office (2-3 days/week)\nSalary range: $115,000 - $125,000\nAbout BRG\nBRG combines world-leading academic credentials with world-tested business expertise and purpose-built emerging technologies. Our culture centers on agility and connectivity which sets us apart and gets you ahead.\nAt BRG, our professionals include specialist consultants, industry experts, renowned academics, and leading-edge data scientists. Together, they bring a diversity of real-world experience, data, and human and artificial intelligence, to economics, disputes, and investigations; corporate finance; and performance improvement services that address the most complex challenges facing organizations across the globe.\nOur unique structure nurtures the interdisciplinary relationships that give us the edge, laying the groundwork for more informed insights and more original, incisive thinking. When paired with our global reach and resources, our diverse perspectives and technical capabilities make us uniquely capable to address our clients’ challenges. We get results because we know how to apply our thinking to your world.\nAt BRG, we don’t just show you what’s possible. We’re built to help you make it happen.\nBRG is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, religion, color, sex, gender, national origin, age, United States military veteran status, ancestry, sexual orientation, marital status, family structure, medical...","description_format":"text","description_chars":12282,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-05T15:10:17Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":42,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/brg-administrator-systems","json_url":"https://alion.io/job/brg-administrator-systems.json","meta":{"generated_at":"2026-11-07T12:52:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14899,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1803497},"rest":"https://alion.io/mcp/rest/get_company?id=1803497"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrg-administrator-systems"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrg-administrator-systems"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrg-administrator-systems"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brg-administrator-systems\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrg-administrator-systems"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3812733}},{"tool":"search_jobs","arguments":{"company":"thinkbrg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3812733},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}