{"id":3092146,"url":"https://alion.io/job/staples-microsoft-identity-directory-services-engineer","title":"Microsoft Identity & Directory Services Engineer","company":{"id":1754708,"name":"Staples","domain":"staples.com","url":"https://alion.io/company/staples-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":82,"open_postings":33,"ghost_share":0,"stale_share":0.909,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Framingham, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":112000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":6333},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"TCP/IP","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"CyberArk","optional":true},{"name":"Delinea","optional":true},{"name":"Git","optional":true}],"status":"live","first_seen_at":"2026-10-22T14:01:42Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-26T22:59:25Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer-centric, results-oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer-centric technology services.\nThe Technical Analyst, Identity and access management is a senior technical contributor responsible for the design, implementation, administration, security, automation, and continuous improvement of enterprise directory and identity management platforms. You will support Microsoft Entra ID, Active Directory, authentication and authorization services, identity governance, and privileged access solutions. In this highly collaborative role, you will help keep directory services secure, resilient, and highly available while advancing modernization, Zero Trust, and operational excellence across the identity ecosystem.\nWhat you'll be doing:\nDesign, implement, administer, and support enterprise Microsoft Entra ID and Active Directory environments for reliability, security, and scalability.\nManage users, groups, organizational units, service accounts, Group Policy, replication, trusts, and identity lifecycle processes.\nDevelop and maintain Conditional Access policies, multi-factor authentication controls, passwordless authentication solutions, and identity protection capabilities aligned with Zero Trust principles.\nLead troubleshooting and root cause analysis for complex directory, authentication, authorization, and access management issues.\nBuild and maintain automation using PowerShell, Microsoft Graph API, and related technologies to improve efficiency, consistency, and service quality.\nContribute to Active Directory upgrades, tenant transformations, migrations, governance enhancements, and hybrid identity initiatives.\nIntegrate identity services with cloud, SaaS, and enterprise applications using modern authentication protocols and security standards.\nMonitor service health, performance, capacity, operational metrics, and security posture, driving remediation and continuous improvement.\nAdminister identity governance capabilities, including access reviews, entitlement management, lifecycle workflows, role-based access controls, and privileged access management.\nCreate technical standards, engineering documentation, operational procedures, and best practices.\nEvaluate emerging identity and security technologies and recommend solutions that strengthen security, operations, and user experience.\nMentor junior team members, serve as an escalation point, and lead small technical projects or workstreams.\nWhat you bring to the table:\nStrong analytical and problem-solving skills with the ability to diagnose complex technical issues and implement lasting solutions.\nInitiative and accountability for delivering secure, reliable, high-quality technology solutions.\nAbility to prioritize multiple assignments and competing needs in a dynamic environment.\nStrong collaboration and relationship-building skills across technical and business teams.\nExcellent written and verbal communication skills, including the ability to translate technical concepts for varied audiences.\nA continuous learning mindset and interest in identity management, cybersecurity, automation, and cloud technologies.\nWhat's needed - Basic Qualifications:\n2+ years of experience administering Microsoft Active Directory Domain Services, Microsoft Entra ID, and hybrid identity solutions.\nExperience managing Active Directory operations, including object lifecycle administration, replication, Group Policy, trusts, and directory services.\nExperience with Conditional Access, MFA, Zero Trust identity controls, identity governance, role-based access controls, access reviews, entitlement management, and lifecycle workflows.\n3+ years of experience with PowerShell scripting, automation, Microsoft Graph API integrations, and systems integration.\nExperience supporting modern authentication and identity protocols, including OAuth, OpenID Connect, SAML, DNS, LDAP/LDAPS, Kerberos, and TCP/IP.\n5+ years of experience supporting enterprise identity, infrastructure, cloud, or directory services environments.\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent experience.\nWhat's needed - Preferred Qualifications:\nExperience with Microsoft Entra Connect, Entra Cloud Sync, or hybrid identity synchronization technologies.\nExperience supporting tenant migrations, mergers, acquisitions, or large-scale identity transformation initiatives.\nExperience with Privileged Identity Management, privileged access management, or enterprise PAM platforms such as CyberArk or Delinea.\nExperience supporting identity backup, recovery, disaster recovery, or business continuity solutions.\nExperience with Infrastructure as Code, DevOps practices, Git, Azure DevOps, or related automation frameworks.\nIndustry certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Administrator Associate, CISSP, Security+, or equivalent.\nExperience using AI-assisted tools for scripting, automation, troubleshooting, or operational efficiency.\nMaster's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.\nWe Offer:\nInclusive culture with associate-led Business Resource Groups\nFlexible PTO (22 days) and Holiday Schedule\nOnline and Retail Discounts, Company Match 401(k), Physical and Mental Health Wellness programs, and more!\nThe salary range represents the expected compensation for this role at the time of posting. The specific base pay may be influenced by a variety of factors to include the candidate's experience, skill set, education, geography, business considerations, and internal equity. In addition to base pay, this role may be eligible for bonuses, or other forms of variable compensation.","description_format":"text","description_chars":6077,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","B2B Commerce","Office Supplies & Stationery"],"lifecycle":[{"event":"open","at":"2026-10-22T15:12:21Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 137 · green card filings: 34","filings_12m":137,"filings_prev_12m":154,"green_card_filings_12m":34,"median_offered_wage_usd":136506,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":20,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/staples-microsoft-identity-directory-services-engineer","json_url":"https://alion.io/job/staples-microsoft-identity-directory-services-engineer.json","meta":{"generated_at":"2026-10-26T23:05:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31367,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754708},"rest":"https://alion.io/mcp/rest/get_company?id=1754708"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstaples-microsoft-identity-directory-services-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstaples-microsoft-identity-directory-services-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstaples-microsoft-identity-directory-services-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/staples-microsoft-identity-directory-services-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstaples-microsoft-identity-directory-services-engineer"}]}