{"id":34616,"url":"https://alion.io/job/tmhcc-systems-engineer-infrastructure-2","title":"Systems Engineer Infrastructure","company":{"id":7638,"name":"Tokio Marine HCC","domain":"tmhcc.com","url":"https://alion.io/company/tmhcc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":16,"ghost_share":0.063,"stale_share":0.625,"repost_share":0.063,"time_to_fill_p50_days":48,"computed_at":"2026-10-20T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":198000,"period":"year","method":"role_country_seniority_unknown","sample_n":4161},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-06-19T00:00:00Z","employer_posted_date":"2026-06-19","last_verified_at":"2026-10-21T01:26:39Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":124},"description":"Systems Engineer, Infrastructure\nLocation: Houston, TX (Hybrid 4:1)\nReports To: Manager, Identity and Access Management\nEmployment Type: Full time\nAbout Us\nHelp us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance-covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad.\nGuided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what’s next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.\nRole Overview\nWork as a technical lead and subject matter expert in designing, architecting, implementing, operating, and maintaining access management solutions using Entra ID, Active Directory, Okta.\nKey Responsibilities\nProven expert knowledge of Azure Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager and Application Registrations.\nStrong understanding of PIM and the assignment of roles / IAM permissions on Management Groups, Subscriptions and Resources.\nAzure Infrastructure Management to include user accounts, groups, conditional policies, Intune management, mobile device management, and endpoint security.\nStrong understanding of App registration, Enterprise Apps, SPN’s and managed identities with the understanding of least privileged administration when it comes to MS Graph API allocation of permissions.\nStrong understanding of multifactor authentication, SSPR and WHfB.\nStrong PowerShell scripting skills, automation, and scheduling skills when working with data in Azure.\nGood understanding of Intune policies management and autopilot.\nStay abreast of the latest Entra ID features, best practices, and security trends, and make recommendations for continuous improvement.\nStrong background in Active Directory covering domains that span geographies with numerous domain controllers, AD sites and a user base of 5000+.\nStrong understanding of DNS and GPOs, user object and OU administration.\nSolid understanding of Microsoft Tiering, IAM, and PAM concepts.\nStrong knowledge of server operating systems from Windows 2016 to Windows 2025.\nStrong understanding of the FSMO roles when it comes to maintaining the security and integrity of the domain.\nStrong understanding of the delegation of permissions across the domain OU structure.\nStrong PowerShell scripting skills, automation, and scheduling skills.\nSolid understanding of the recovery steps needed to recover a domain in the event of a disaster.\nAble to demonstrate a strong understanding of IAM concepts, including identity federation, SSO, SAML, OAuth, OIDC, MFA, role-based access control (RBAC), and least privilege principles.\nProvide Okta subject matter expertise on application integration, IAM functionality, and Okta’s feature roadmap.\nDesign and implement Okta platform configurations to align with overall solution architecture and customer requirements.\nDrive and support customer application integrations into Okta-based IAM solutions and troubleshoot technical issues before, during, and after application integration.\nWhat You Bring\nBachelor’s degree in Computer Science, a related field, or the equivalent education and/or experience.\n2 years of relevant and progressive professional experience.\nKnowledge and experience of CyberArk advantageous.\nKnowledge and experience with Rubrik advantageous.\nMicrosoft, Azure or Okta certification are highly beneficial.\nTravel\nOccasional travel (up to 10% of time)\nWhat We Offer\nCompetitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on your date of hire\nStrong learning culture with ongoing development opportunities\nBasic life and disability insurance\n401(k) plan with 6% company match\n20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off\nPaid parental leave\nAn opportunity to do meaningful work and love what you do\nEqual Opportunity Employer\nTMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances.","description_format":"text","description_chars":4938,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Property & Casualty Insurance","Reinsurance"],"lifecycle":[{"event":"open","at":"2026-06-19T00:00:00Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.203,"p_room":0.28,"age_days":123,"expected_fill_days":48,"reasons":["conf:29","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/tmhcc-systems-engineer-infrastructure-2","json_url":"https://alion.io/job/tmhcc-systems-engineer-infrastructure-2.json","meta":{"generated_at":"2026-10-21T03:24:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5037,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7638},"rest":"https://alion.io/mcp/rest/get_company?id=7638"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftmhcc-systems-engineer-infrastructure-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftmhcc-systems-engineer-infrastructure-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftmhcc-systems-engineer-infrastructure-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tmhcc-systems-engineer-infrastructure-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftmhcc-systems-engineer-infrastructure-2"}]}