{"id":3469222,"url":"https://alion.io/job/brmi-junior-it-administrator-identity-access-management-iam","title":"Junior IT Administrator – Identity & Access Management (IAM)","company":{"id":4422694,"name":"BRMi","domain":"brmi.com","url":"https://alion.io/company/brmi-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":119000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":40},"experience_years_min":1,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T16:30:39Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T08:59:43Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Overview\nWe are seeking a Junior IT Administrator to support the daily operations, administration, and maintenance of enterprise identity and access management (IAM) systems. This entry-level position will work with Microsoft Entra, Active Directory, Active Directory Lightweight Directory Services (AD-LDS), and Active Directory Federation Services (ADFS) to support secure authentication, authorization, and identity management across the organization.\nThe Junior IT Administrator will handle routine IAM service requests, troubleshoot authentication and access issues, support application integration reviews, and assist with identity governance activities. This role works closely with application teams, security personnel, and other technology stakeholders to ensure identity solutions follow established security standards, approval processes, and least-privilege principles.\nThe ideal candidate will have foundational experience in IT operations, systems administration, or technical support, along with an understanding of Active Directory, authentication technologies, and IAM best practices. Success in this position requires strong troubleshooting skills, attention to detail, effective communication, and the ability to recognize when issues require escalation.\nBenefits:\nComprehensive Medical, Dental, and Vision Insurance\nEmployer-Paid Life Insurance\nEmployer-Paid Short-Term and Long-Term Disability Insurance\n401(k)\nPaid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays\nEducational Assistance\nSalary: 70k-100k\n**Can be 100% remote in TX, VA, MD, DC, or FL**\n**High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)**\nClick here to learn about BRMi's culture.\nClick here to see BRMi’s Glassdoor reviews\nResponsibilities\nAdminister and support enterprise identity and access management systems, including Microsoft Entra, Active Directory, AD-LDS, and ADFS.\n\nProvision, modify, and deprovision service principals in Microsoft Entra according to established standards and approval workflows.\n\nCreate and manage Microsoft Entra Enterprise Applications, including sign-on configurations, application ownership, and user or group assignments.\n\nReview and assign API permissions while ensuring access follows least-privilege principles and established approval requirements.\n\nCoordinate with secrets management teams to track and renew client secrets and certificates before expiration.\n\nReview new application requests for alignment with IAM security standards and best practices.\n\nEvaluate application authentication and integration requirements, identifying technical dependencies, security concerns, and potential gaps.\n\nAssess application support for authentication protocols, including OpenID Connect (OIDC), SAML, and Integrated Windows Authentication.\n\nReview application user provisioning and deprovisioning methods, including SCIM, Just-In-Time provisioning, and manual processes.\n\nIdentify excessive or unsupported application permissions and document findings for governance review.\n\nProvide technical information and recommendations to support application governance and integration decisions.\n\nRespond to IAM consultation requests and provide guidance regarding Microsoft Entra, Active Directory, and AD-LDS services.\n\nResearch and document security group information, including ownership, membership, naming conventions, and descriptions.\n\nPerform routine administration of service principals, service accounts, and security groups when automated processes are unavailable.\n\nInvestigate and troubleshoot identity synchronization issues between Microsoft Entra and Active Directory.\n\nGuide users and application teams through established IAM request and intake procedures.\n\nTroubleshoot recurring Active Directory account lockouts and identify potential sources of authentication failures.\n\nInvestigate and resolve authentication issues involving user accounts, service accounts, and other non-human identities.\n\nSupport troubleshooting of authentication technologies, including YubiKey, HYPR, and LastPass.\n\nInvestigate authentication failures associated with Conditional Access policy evaluations.\n\nAssist with recovery of Active Directory user, group, and computer objects.\n\nDocument service requests, incidents, troubleshooting activities, and resolutions in accordance with established procedures.\n\nEscalate complex technical issues or security concerns to appropriate engineering and security teams.\n\nMaintain compliance with organizational security policies, identity governance standards, and established change management procedures.\n\nPerform other duties as assigned.\n\nQualifications\nAssociate degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education, training, and experience.\n\n1-3 years of experience in IT operations, technical support, service desk, systems administration, or a related technical role.\n\nWorking knowledge of Active Directory, including user accounts, security groups, computer objects, organizational units, and authentication fundamentals.\n\nFoundational understanding of identity and access management concepts, including authentication, authorization, single sign-on (SSO), multifactor authentication (MFA), and least-privilege access.\n\nFamiliarity with the Microsoft Entra administration center and basic management of users, groups, and enterprise applications.\n\nAbility to troubleshoot technical issues, isolate potential causes, and document findings accurately.\n\nStrong analytical, problem-solving, and organizational skills.\n\nAbility to follow documented technical procedures, change management requirements, and established approval workflows.\n\nStrong attention to detail and commitment to maintaining security and operational accuracy.\n\nEffective written and verbal communication skills.\n\nAbility to collaborate with end users, application teams, security personnel, and technical stakeholders.\n\nAbility to recognize technical issues that require escalation and communicate findings appropriately.\n\nBachelor's degree in Information Technology, Cybersecurity, or a related field preferred.\n\nHands-on experience administering service principals, app registrations, and Enterprise Applications in Microsoft Entra preferred.\n\nKnowledge of API permission management, application consent models, and access controls preferred.\n\nExperience with ADFS relying party trusts, claim rules, and SAML certificate management preferred.\n\nFamiliarity with authentication protocols such as SAML 2.0, OIDC, OAuth 2.0, Kerberos, and Integrated Windows Authentication preferred.\n\nExperience with SCIM or Just-In-Time user provisioning preferred.\n\nExperience supporting passwordless authentication technologies, including YubiKey (FIDO2/PIV) and HYPR, preferred.\n\nFamiliarity with AD-LDS, Microsoft Entra Connect, and directory synchronization technologies preferred.\n\nExperience using PowerShell or Microsoft Graph PowerShell SDK for reporting and identity administration preferred.\n\nExperience with IT service management platforms such as ServiceNow for incident, request, and change management preferred.\n\nUnderstanding of identity governance practices, including access certifications, entitlement management, and Conditional Access policies preferred.\n\nMicrosoft SC-300, SC-900, AZ-104, CompTIA Security+, or similar technical certifications preferred.\n\n** BRMi will not sponsor applicants for work visas for this position.**\n**This is a W2 opportunity only**\nEOE/Minorities/Females/Vet/Disabled\nWe are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.","description_format":"text","description_chars":8238,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":true},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Software Testing & QA","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-29T16:30:39Z"}],"visa":[],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.861,"p_room":0.9,"age_days":4,"expected_fill_days":12,"reasons":["conf:1","velocity","win:mid","comp:junior"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/brmi-junior-it-administrator-identity-access-management-iam","json_url":"https://alion.io/job/brmi-junior-it-administrator-identity-access-management-iam.json","meta":{"generated_at":"2026-11-03T13:20:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18399,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422694},"rest":"https://alion.io/mcp/rest/get_company?id=4422694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrmi-junior-it-administrator-identity-access-management-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrmi-junior-it-administrator-identity-access-management-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrmi-junior-it-administrator-identity-access-management-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brmi-junior-it-administrator-identity-access-management-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrmi-junior-it-administrator-identity-access-management-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3469222}},{"tool":"search_jobs","arguments":{"company":"brmi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3469222},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}