Senior Systems Administrator

Job Description

Join Our Team as a Senior Systems Administrator, Identity!

Work arrangement: Hybrid (2 days WFH)

Compensation

At S&C, we are dedicated to providing competitive and equitable compensation for all our team members and are committed to transparency in our pay practices. The estimated annual base salary range for this position is $87990 - $116578.8. Individual pay within this salary range is determined by several compensable factors, including performance, knowledge, job-related skills and experience, and relevant education or training.

This position may also be eligible for S&C's annual incentive plan (AIP). AIP amounts are variable and are dependent on both company and individual performance, subject to eligibility criteria. The target bonus percentage for this role is 5% of annual base earnings.

The Senior Systems Administrator, Identity is responsible for the secure administration, support, and continuous improvement of the organization's identity and access management environment. This role manages user identities, authentication, authorization, access lifecycle processes, privileged access controls, identity governance, and hybrid identity services across Microsoft Entra ID, Active Directory, Microsoft 365, cloud services, and integrated enterprise applications. The position helps ensure that employees, contractors, applications, and systems have appropriate access based on business need, security standards, compliance requirements, and least-privilege principles.

Key Responsibilities

Administer and support enterprise identity platforms, including Microsoft Entra ID, Active Directory, Microsoft 365 identity services, privileged access management, identity governance, single sign-on, multifactor authentication, conditional access, and hybrid identity synchronization.

• Provision, modify, review, and deprovision access in alignment with joiner, mover, leaver, and approved access request processes.
• Implement and maintain role-based access controls, least-privilege access, privileged access management, access reviews, access packages, lifecycle workflows, and identity governance processes.
• Configure and support authentication and authorization controls, including integrations, multifactor authentication, conditional access, passwordless authentication, single sign-on, federation, and application access policies.
• Monitor identity-related alerts, logs, reports, sign-in activity, access review results, and privileged role activity to identify policy exceptions, operational issues, and security risks.
• Troubleshoot complex identity, authentication, authorization, synchronization, service account, application access, and directory issues in partnership with infrastructure, security, application, and support teams.
• Maintain identity management documentation, operational procedures, configuration records, access standards, and audit evidence to support compliance and operational consistency.
• Apply company security standards, change management practices, privacy requirements, and Zero Trust principles when administering identity and access services.

Support identity modernization initiatives, including identity lifecycle automation, application onboarding, privileged access improvements, access governance enhancements, identity reporting, and operational process improvements.

• Support internal and external audit requests by collecting identity, access, privileged role, and control evidence.
• Recommend improvements to access request workflows, approval models, reporting, automation, role design, and access recertification processes.
• Provide guidance to service desk teams, application owners, project teams, and business stakeholders on identity and access procedures.
• Participate in incident response, root cause analysis, and remediation activities related to identity and access controls.
• Communicate effectively and respectfully with others and contribute to a collaborative, inclusive workplace.
• Perform other responsibilities as assigned.

What we are looking for:

• Associate degree, college diploma, or equivalent formal education in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Equivalent combination of education, training, and relevant work experience may be considered.
• 5+ years of experience administering Microsoft hybrid identity environments, including Active Directory and Microsoft Entra ID.
• 5+ years of experience in identity and access management, access administration, security operations, infrastructure administration, or a closely related technology role.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Security Engineer Associate, or comparable Microsoft identity certification (within 6 mos).
• Experience with Microsoft Entra Privileged Identity Management, Conditional Access, Identity Governance, lifecycle workflows, access packages, entitlement management, and hybrid identity synchronization.
• Deep knowledge of identity and access management concepts, including authentication, authorization, least privilege, role-based access control, single sign-on, multifactor authentication, conditional access, privileged access, and access lifecycle management.
• Hands-on experience administering Microsoft Entra ID, Active Directory, Microsoft 365 identity services, users, groups, roles, licenses, service accounts, and enterprise application access.
• Strong experience supporting audit and compliance activities.
• Ability to analyze access requests, troubleshoot complex identity issues, interpret sign-in and audit logs, and apply security policies accurately.
• Understanding of identity governance practices, including access reviews, privileged access management, account recertification, joiner-mover-leaver controls, and audit evidence collection.
• Proficiency with PowerShell, Microsoft Graph, Kusto Query Language, service management processes, audit controls, security frameworks, and automation of identity lifecycle tasks.
• Ability to communicate technical information clearly to technical and non-technical audiences, document procedures, and provide guidance to stakeholders.
• Capable of embracing diversity and equity to contribute to a respectful and inclusive workplace.

Preferred

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Microsoft Certified: Azure Administrator Associate, Microsoft 365 Administrator certification, Security+, ITIL Foundation, or equivalent identity, cloud, security, or service management certification.
• Experience in a global, highly confidential, regulated, manufacturing, or professional-services environment.
• Working knowledge of cloud security, networking, PKI and certificates, application architecture, and security operations, supported by strong analytical, troubleshooting, documentation, presentation, and stakeholder-management skills.

Physical Effort:

Normal or frequent minor physical effort required for the day-to-day activity in the workplace. May involve standing, sitting, walking, climbing stairs and lifting/moving/using objects or equipment up to 20lbs.

Work Environment:

Acceptable working environment with minor or almost no disagreeable or challenging working conditions as part of everyday expected levels (all jobs will occasionally experience undesirable or disagreeable events).

Vacancy Disclosure:

This posting is to fill an existing vacancy within S&C Electric Canada.

Artificial Intelligence Disclosure:

Please note that S&C Electric Canada may use artificial intelligence (AI) tools to assist in the screening, assessment, or selection of applicants for this position.