The IT User Account Administrator is responsible for administering and supporting the firm's identity and access management processes, ensuring secure, compliant, and efficient access to firm systems, applications, and data. The IT User Account Administrator manages the full user lifecycle, including onboarding, transfers, access changes, and offboarding, while supporting Active Directory, Microsoft Entra ID, Microsoft 365, authentication technologies, and access governance initiatives. The IT User Account Administrator works closely with Information Technology, Human Resources, Information Security, and business departments to deliver timely access provisioning, maintain security controls, and improve identity management processes through automation and operational efficiencies.

Essential Duties and Responsibilities: 

• Create, modify, and deactivate user, shared, service, vendor, and application accounts across Active Directory, Microsoft Entra ID, Microsoft 365, and other firm systems.

• Manage the full identity lifecycle, including onboarding, transfers, role changes, and offboarding activities.

• Provision and maintain user access, security group memberships, distribution lists, shared mailboxes, and application entitlements in accordance with firm policies and business requirements.

• Administer identity synchronization and provisioning processes between HR, Active Directory, Microsoft Entra ID, Microsoft 365, and other integrated systems.

• Implement and support authentication technologies, including multi-factor authentication (MFA), single sign-on (SSO), and conditional access controls.

• Perform regular access reviews, account audits, and compliance validations to ensure adherence to security policies and regulatory requirements.

• Troubleshoot and resolve identity, authentication, provisioning, and access-related incidents and service requests.

• Maintain accurate documentation of account management procedures, provisioning workflows, security controls, and operational standards.

• Collaborate with Human Resources, Practice Management, Information Security, Application Support, and other business departments to ensure timely and accurate user access provisioning.

• Support mergers, acquisitions, office expansions, and other firm initiatives involving user identity and access management.

• Identify opportunities to automate manual processes through scripting, workflow improvements, and administration tools to improve operational efficiency.

• Participate in testing, implementation, and support of new identity management technologies and enhancements.

• Provide guidance and training to end users and IT staff regarding identity management processes and security best practices.

Knowledge, Skills, and Abilities:

• Strong understanding of Identity and Access Management (IAM) principles and best practices.

• Advanced knowledge of Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365 administration, and Exchange Online.

• Familiarity with Microsoft Entra Connect synchronization, identity provisioning, and hybrid identity environments.

• Strong troubleshooting, analytical, and problem-solving skills.

• Excellent written, verbal, and interpersonal communication skills.

• Ability to effectively prioritize workloads and manage multiple competing deadlines.

• Strong attention to detail and commitment to data accuracy.

• Familiarity with ITIL practices, ticketing systems, and service management processes.

Education and/or Experience: 

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent combination of education and experience.

• Minimum five (5) years of experience supporting identity and access management functions in a Microsoft-based enterprise environment.

• Experience administering Active Directory, Microsoft Entra ID, Microsoft 365, and Exchange Online.

• Experience supporting identity lifecycle management, user provisioning, and access governance processes.

• Experience with PowerShell automation and administrative scripting preferred.

• Experience implementing or supporting MFA, SSO, Conditional Access, and hybrid identity solutions.

• Experience managing security groups, distribution lists, mailbox permissions, shared mailboxes, and access governance processes.

• Experience supporting MFA, SSO, Conditional Access, and other modern authentication technologies.

• Experience with automation and scripting tools such as PowerShell.

• Experience in a law firm, professional services, or highly regulated environment preferred.

• Strong customer service and client-facing experience.

This position description is intended to describe the general content of and requirements for the performance of the job.  The statements contained in the position description are not necessarily all-inclusive and additional duties and responsibilities may be assigned as determined by business needs.

This position description does not constitute a written or implied contract of employment.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Compensation is dependent on several factors, such as position, location, market, education, training, and/or experience.