{"id":1405515,"url":"https://alion.io/job/the-clearing-house-m365-engineer-entra","title":"M365 Engineer - Entra","company":{"id":1837928,"name":"The Clearing House","domain":"theclearinghouse.org","url":"https://alion.io/company/theclearinghouse-org","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-10-26T05:57:25Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":62000,"max_usd":145000,"period":"year","method":"role_country_seniority_unknown","sample_n":15150},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"IAM","optional":true},{"name":"PKI","optional":true},{"name":"PowerShell","optional":true}],"status":"live","first_seen_at":"2026-09-22T00:00:00Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-27T01:36:56Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"Position summary:\nWe are seeking a highly skilled Microsoft 365 and Entra Identity Administrator to serve as the technical owner of our Microsoft cloud identity platform. This position will be responsible for the day-to-day administration, maintenance, optimization, governance, and security of Microsoft Entra ID, Conditional Access, authentication services, identity lifecycle management, and enterprise application integrations. The ideal candidate will possess deep expertise in modern identity and access management technologies, including SAML, OAuth, OpenID Connect (OIDC), Multifactor Authentication (MFA), and Single Sign-On (SSO), while maintaining strong knowledge of Active Directory, DNS, DHCP, Group Policy, and hybrid identity architecture. Experience supporting cloud platforms such as AWS is highly desirable.\nAbout The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country’s first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.\nResponsibilities\nServe as the primary administrator and technical owner of the Microsoft Entra ID environment.\nAdminister and maintain user lifecycle management, identity governance, authentication methods, and directory services.\nDesign, implement, and maintain enterprise identity and access management solutions.\nConfigure, support, and troubleshoot Single Sign-On (SSO) integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and other modern authentication protocols.\nAdminister Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra.\nManage and optimize Multifactor Authentication (MFA) solutions, including Microsoft Authenticator, authentication strengths, passwordless authentication, and self-service password reset capabilities.\nDevelop and maintain Conditional Access policies aligned with security, compliance, and business requirements.\nMonitor identity-related health, security posture, and access trends while proactively identifying opportunities for improvement and optimization.\nPartner with application owners, cybersecurity teams, and vendors to integrate applications securely with Microsoft Entra ID.\nMaintain and troubleshoot hybrid identity solutions including Entra Connect and Active Directory synchronization services\nAdminister and maintain Active Directory infrastructure, including users, groups, organizational units (OUs), delegation models, and directory services.\nDesign, implement, and troubleshoot Group Policy Objects (GPOs) to support security, compliance, and operational requirements.\nManage and maintain hybrid identity infrastructure supporting synchronization between Active Directory and Microsoft Entra ID.\nAdminister and troubleshoot Microsoft Entra Connect, synchronization services, identity provisioning, and directory-related issues.\nManage and maintain DNS and DHCP services supporting enterprise authentication and application connectivity.\nPerform certificate lifecycle management activities, including certificate renewals, replacements, and troubleshooting for authentication, federation, and secure communications.\nSupport Public Key Infrastructure (PKI) and certificate-based authentication solutions where applicable.\nAssist with identity-related disaster recovery planning, testing, and operational readiness activities.\nCollaborate with infrastructure, cybersecurity, and application teams to ensure secure and reliable identity services across on-premises and cloud environments.\nMonitor and maintain the health, availability, and performance of identity-related infrastructure components.\nundefined\nQualifications\nStrong expertise in Microsoft 365 administration, Microsoft Entra ID, hybrid identity, and directory services.\nDeep understanding of authentication and federation technologies including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Single Sign-On (SSO), and Multifactor Authentication (MFA).\nExperience administering and troubleshooting Enterprise Applications, App Registrations, service principals, and API permissions within Microsoft Entra\nStrong understanding of Conditional Access, authentication methods, identity governance, and modern identity security practices.\nAdvanced knowledge of Active Directory, Group Policy, DNS, DHCP, Microsoft Entra Connect, and hybrid identity architectures.\nExperience managing and troubleshooting identity synchronization between Active Directory and Microsoft Entra ID. \nKnowledge of Public Key Infrastructure (PKI), certificate lifecycle management, and certificate-based authentication services.\nProficiency with PowerShell automation and Microsoft Graph API administration.\nKnowledge of disaster recovery planning, testing, and validation methodologies, with willingness to participate in recovery exercises when required.\nExperience supporting Microsoft Intune, endpoint management, and device-based access controls is a plus.\nFamiliarity with AWS identity integrations, IAM, and Amazon Route 53 DNS administration is preferred.\nMust be comfortable working within a strict and highly governed change management environment.\nMust be committed to maintaining security, risk, and compliance controls within a regulated industry environment.\nAbility to create and maintain technical documentation, operational procedures, and knowledge transfer materials.\nDemonstrated ability to troubleshoot complex technical issues, take ownership of problems, and drive resolutions through completion.\nExcellent communication, analytical, and problem-solving skills.\nStrong attention to detail, organizational skills, and operational discipline.\nWork Conditions & Expectations\nHybrid Schedule: 3 days onsite (Charlotte NC preferred, occasional asks to report to Winston-Salem NC as needed); On-site work requirements can change at any time. \nOperational Flexibility: Ability to perform after-hours changes and participate in on-call rotations when required.\nDynamic Environment: Work involves frequent troubleshooting, collaboration across teams, and adapting to evolving technologies.\nSecurity & Compliance: Must adhere to strict Change Management processes and participate in security reviews as needed.\nStandard Office Setup: Role primarily uses standard IT equipment (laptops, conferencing tools, monitoring systems) with occasional interaction with server rooms or networking hardware.","description_format":"text","description_chars":7019,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services"],"lifecycle":[{"event":"open","at":"2026-09-28T17:32:53Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.792,"p_room":0.75,"age_days":34,"expected_fill_days":42,"reasons":["conf:14","velocity","win:late"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/the-clearing-house-m365-engineer-entra","json_url":"https://alion.io/job/the-clearing-house-m365-engineer-entra.json","meta":{"generated_at":"2026-10-27T05:04:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4943,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1837928},"rest":"https://alion.io/mcp/rest/get_company?id=1837928"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-clearing-house-m365-engineer-entra"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-clearing-house-m365-engineer-entra"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-clearing-house-m365-engineer-entra"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-clearing-house-m365-engineer-entra\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-clearing-house-m365-engineer-entra"}]}